[DRE-maint] Bug#995875: Stable also affected

[Diederik de Haas]

On 7 Oct 2021 18:35:18 +0200 Francesco Poli <invernomuto at paranoici.org> wrote:
> This seems to be exactly the same issue that was reported in #995448,
> which is marked as affecting package apt-listbugs.
> 
> However, I see that you are using oldstable: I don't know whether a
> fixed version of ruby-httpclient will ever be backported to oldstable.
> Maybe it can enter oldstable as a security update... I am not sure
> whether it will be considered as a security issue worth a DSA, though...

I just started to write to #995448 to mention that Stable is also affected. 
Maybe that changes the equation?
The version of ruby-httpclient is the same for Stable and Oldstable btw.

Cheers,
  Diederik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-ruby-extras-maintainers/attachments/20211014/234696dc/attachment.sig>