On Tue, Nov 12, 2013 at 11:59:15PM -0500, Daniel Kahn Gillmor wrote: > Hi Simon-- > > Re: http://bugs.debian.org/729028: > > On Tue 2013-11-12 23:04:07 -0500, Simon Horman wrote: > > Thanks for bringing this to my attention and sorry > > for not noticing the mailing list post: I'm not suer what happened there. > > dunno if you care to investigate the mailing list situation further. if > you do, the post to the mailing list was Message-ID: > <87zjpfwqft....@alice.fifthhorseman.net> > > The handoff to the vergenet MX looked like this from my side: > > Nov 7 21:57:50 che postfix/smtp[32630]: 7E90AF984: > to=<perdition-us...@vergenet.net>, > relay=mail.au.vergenet.net[202.4.237.240]:25, delay=5.2, > delays=0.55/0.01/3.6/1, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as > B4DE9266CEF) > > The message doesn't seem to have made it through to the pipermail > archives, which see no messages for November 2013 at all: > > http://lists.vergenet.net/pipermail/perdition-users/ > > > I think that the best thing to do is both: > > * Update the Debian packages with this fix and; > > * Release a fresh upstream version of perdition with this fix. > > This sounds like a reasonable approach to me. I'm cc'ing the security > team so that they're aware of the problem and the potential security-fix > upload(s). Would you like me to request a CVE for tracking this issue, > or do you intend to request one yourself?
If you could request one that would be great. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
