On 07/12/2012 11:26 PM, Eric Dorland wrote: > > Thanks! It looks like this was actually fixed in Debian a few years > ago as part of the CVE-2009-4029 > (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4029) fix. > Well, I'm really disappointed that nobody reported this upstream to us; our non-Debian users would have been saved from two and a half years of potential vulnerability :-/ Utterly inconsiderate on part of Debian developers, I must sadly say.
Stefano