[Pkg-kde-extras] Bug#807801: Sponsoring for upload CVE-2015-8547

Salvatore Bonaccorso carnil at debian.org
Sun Dec 27 08:09:13 UTC 2015


Hi Pierre,

On Mon, Dec 14, 2015 at 10:28:26PM +0100, Pierre Schweitzer wrote:
> Dear all,
> 
> After having asked for a CVE[0] for this Quassel issue [1], I've
> uploaded you (attached) a debdiff & dsc to the bug report for an upload.
> Would you be able to sponsor the upload, as I can't?
> Or perhaps the maintainers are available for the upload?

Can you help me evaluating the issue, since I'm not a quassel user
myself: From a quick search and a bit of testing with a
quassel-client/quassel-core setup, am I right that

 a/ multi-user setups with quassel-core are non-default and not
    so frequent?
 b/ This issue can (only) be triggered by a client connected to a
    quassel core?

Regards,
Salvatore
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20151227/d4930f9f/attachment-0001.sig>


More information about the pkg-kde-extras mailing list