Re: CVE-2010-3205 affects textpattern package
On 21/05/13 22:09, Moritz Muehlenhoff wrote:
> Thanks, I've updated the security tracker!
Okay, thank you!
I couldn't say for sure the exploit given the CVE is real, and there's
very little interest in the package any more (orphaned, low popcon,
removed); but I thought it is better to mark it as affecting until
someone can actually show otherwise.
I assume NOT-FOR-US was meant for things not packaged at all so was
probably an oversight in this case.
Regards,
--
Steven Chamberlain
steven@pyro.eu.org
Reply to: