[tryton-debian] Security fix for safe_eval in Tryton server

[Mathias Behrle]

* Raphael Hertzog: " Re: Security fix for safe_eval in Tryton server" (Wed, 1
  Oct 2014 00:28:23 +0200):

Hi Raphael,

> On Tue, 30 Sep 2014, Mathias Behrle wrote:
> > > BTW, what's the status for squeeze? The version there is even older but
> > > as we officially support LTS, it would be nice if you could provide me an
> > > update for that version too (in case it also applies).
> > 
> > As written in my original mail I didn't plan an upload for oldstable.
> > 
> > First because I really don't expect any user to run Tryton 1.6 any more.
> > Second it would be a stripped down version of the patches (only the one for
> > safe_eval), because ast is new in Python 2.6 (and squeeze has 2.5).
> 
> That's fine.
> 
> > If you estimate nevertheless, that the package should be done, I will
> > provide it.
> 
> Yes, please. I agree with you that probably nobody is using it but if it's
> not too much work, I believe it's good to live up to our new LTS promise.
> 
> The only alternative solution is to mark the package as unsupported in
> that release (via debian-security-support) and I'd rather avoid that.

Here comes the debdiff attached. Thanks for uploading.

Cheers,
Mathias


-- 

    Mathias Behrle
    PGP/GnuPG key availabable from any keyserver, ID: 0x8405BBF6
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/tryton-debian/attachments/20141001/fa2896c4/attachment.sig>