[Pkg-roundcube-maintainers] Bug#536498: closed by Nico Golde <nion at debian.org> (Re: Bug#536498: Please backport roundcube CVE-2008-5619)

[Benjamin Bannier]

On Fri, 10 Jul 2009 19:45:41 +0200
Nico Golde <nion at debian.org> wrote:

> > I see roundcube-0.1.1-10~bpo40+2 still in backports. [..]
> 
> That's why I marked this bug as done with the unstable version.

Sorry, maybe I got confused. I reported this bug here because the
backports version was listed in the list of Debian packages. 

If backports doesn't even have bugtracker (couldn't find one on
their homepage) this is maybe the right time to dump if from my
sources.list.

> > I urge you to please make a version bump to backports since this is
> > a security issue.
> 
> The best would be probably to ping the one who did the initial
> backport. I CCed Alexander Wirt and Gerfried Fuchs (from
> backports.org), maybe they can help you.

Thanks. This should really be fixed.

Benjamin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20090710/f3cf4d7b/attachment-0001.pgp>