Re: CVE-2009-1284

To: debian-tex-maint@lists.debian.org
Subject: Re: CVE-2009-1284
From: Hilmar Preuße <hille42@web.de>
Date: Wed, 2 Dec 2009 21:23:37 +0100
Message-id: <[🔎] 20091202202337.GA6742@preusse-16223.user.cis.dfn.de>
Mail-followup-to: debian-tex-maint@lists.debian.org
In-reply-to: <[🔎] 20091202143102.GL26546@gamma.logic.tuwien.ac.at>
References: <20091119073421.GC17284@gamma.logic.tuwien.ac.at> <20091128181929.GA29519@preusse-16223.user.cis.dfn.de> <20091129062345.GE27026@gamma.logic.tuwien.ac.at> <20091129102029.GA6707@preusse-16223.user.cis.dfn.de> <20091129124130.GD2357@gamma.logic.tuwien.ac.at> <20091129172300.GA740@PC23> <[🔎] 20091202143102.GL26546@gamma.logic.tuwien.ac.at>

On 02.12.09 Norbert Preining (preining@logic.at) wrote:
> On So, 29 Nov 2009, Hilmar Preusse wrote:

Hi,

> > I guess we have already from the sec-people the permission to not
> > fix old-stable.  Yes, we could fix oldstable (the patch is always
> > the
> 
> Ok, then let it rot there. I had the impression that there are bugs
> to be fixed, other thant that one, in old stable (the other CVEs).
> 
This is correct. When looking at the PTS^1 page for texlive-base-bin
they're listed. However none of these 4 are fixed in old-stable and I
don't see, why we should make an exception for this one.

The patch for stable is in the SVN, please refine the changelog
present the result to the security team.

Thanks,
  Hilmar

^1 http://security-tracker.debian.org/tracker/source-package/texlive-bin
-- 
Meade's Maxim:
	Always remember that you are absolutely unique, just like everyone else.
  http://www.hilmar-preusse.de.vu/

Reply to:

References:
- Re: CVE-2009-1284
  - From: Norbert Preining <preining@logic.at>

Prev by Date: Re: CVE-2009-1284
Next by Date: Bug#559120: texlive-binaries: upgrade failure from texlive 2007
Previous by thread: Re: CVE-2009-1284
Next by thread: Re: CVE-2009-1284
Index(es):
- Date
- Thread