[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security problem: who is responsible?



Marc Wilson schreef:
> On Fri, Jul 28, 2006 at 11:24:29AM +0200, Paul van der Vlis wrote:
> 
>>At 2006/06/10 a security-update of libfreetype6 was publiced what
>>generates a big problem in OpenOffice. See:
>>http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=372719
> 
> Yep, lots of discussion there, obviously being actively worked on.
>
>>I don't understand the security-team has not made a new version of
>>libfreetype6 after 47 days. Maybe a crashing OpenOffice is not a
>>security-problem?
> 
> Maybe you should actually read the bug you refer to.

The bug is found at Jun 11.
Steve Langasek (maintainer of libfreetype6) makes patches, the last at
Jul 07.
Martin Schulze sees some problems in it at Jul 23.

Normally the security-team works fast....

With regards,
Paul van der Vlis.



Reply to: