[request-tracker-maintainers] Fixes for RT 3.x issue CVE-2011-0009

[Dominic Hargreaves]

On Thu, Jan 20, 2011 at 12:39:23PM +0100, Julien Cristau wrote:
> On Thu, Jan 20, 2011 at 11:10:31 +0000, Dominic Hargreaves wrote:
> 
> > SRM, could you advise on whether this can be included in Saturday's
> > point release?
> > 
> The cutoff for this was on monday.  So no.

Thanks for confirming; as I thought. I'm still discussing with the
security team about the best route to updating this, but from your
point of view would the changes be okay for the point release after
next (ie can I upload this to stable if needed)?

Thanks,
Dominic.

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)