[Pkg-cacti-maint] Fwd: Re: Multiple vulnerabilities in Cacti 0.8.8a in Debian 7.1

Paul Gevers elbrus at debian.org
Mon Aug 12 18:48:16 UTC 2013


On 08-08-13 21:27, Salvatore Bonaccorso wrote:
>> Just to be sure, a regression in 0.8.8b surfaced today on the cacti-user
>> e-mail list [1] and Gandalf (one of the cacti maintainers) proposed a
>> patch [2]. I think we should include the (final) patch in the update.
>> What do you think?

> Yes I agree that the fix for the regression needs to be included. I
> have replied to the oss-security list about the regression found.
> 
> Could you first apply the patches needed to unstable and give there a
> wider basis for testing further regressions? 

How long should I wait with the fix in unstable before uploading the
packages to security-master? (The package is in unstable since Friday).

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 551 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130812/af982e94/attachment.sig>


More information about the Pkg-cacti-maint mailing list