Control: tag -1 pending On Sun, Dec 22, 2013 at 01:17:01AM +0100, Stig Sandbeck Mathisen wrote: > I've pushed a proposed fix for this security issue to the packaging > repo git://anonscm.debian.org/collab-maint/devscripts.git as the > branch CVE-2013-7085-ruin-someones-yuletide
Thanks for the patch. We've addressed this by other means and are just pending some final review before uploading. > The change also fixes a second bug, where one could not exclude a > non-empty top level directory, but had to use "somedirectory/*". Thanks for noticing that. I've made a change for this as well. Cheers, -- James GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <james...@debian.org>
signature.asc
Description: Digital signature
