On Fri, 29 Jun 2012 21:41:46 +0200 Florian Weimer wrote: > * Francesco Poli: > > > DSA-2503-1 [1] states that CVE-2012-3366 is fixed in sid by > > bcfg2/1.2.2-2, but the tracker [2] seems to disagree. > > > > I think that the DSA is probably right, since the BTS seems to > > tell the same story [3]. > > Thanks, fixed. Thanks to you! :-) > > Would you be willing to fix these issues on your own, now that > Subversion 1.7 (which is licensed under the Apache License 2.0) has > entered the archive? Thanks for the offer, I will think about it. It cannot happen now, but it *could* happen in the future... Bye. -- http://www.inventati.org/frx/frx-gpg-key-transition-2010.txt New GnuPG key, see the transition document! ..................................................... Francesco Poli . GnuPG key fpr == CA01 1147 9CD2 EFDF FB82 3925 3E1C 27E1 1F69 BFFE
Attachment:
pgpDu8zW6_fL9.pgp
Description: PGP signature