[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Incorrect information in security tracker regarding the mahara package



(please CC me on replies, thanks!)

On 2009-10-22 at 23:00:45, Michael Gilbert wrote:
> did you manually check the code?  we have to review the source code
> directly because advisory texts are often inexact, incomplete, or
> incorrect.

Hi Michael,

I'm one of the upstream developers (and the author of the advisory), but
yes, we did review both 1.0 and 1.1 but only found the problem to be present
in version 1.1.

Both 1.0 and 1.1 are supported upstream, though the 1.0 series only gets
security fixes.

Cheers,
Francois

-- 
Francois Marier                          identi.ca/fmarier
Debian GNU/Linux Developer             twitter.com/fmarier
http://feeding.cloud.geek.nz   http://lca2010.blogspot.com

Attachment: signature.asc
Description: Digital signature


Reply to: