On Sun, Sep 14, 2008 at 01:16:28PM +0100, Jonathan McDowell wrote:
> On Sun, Sep 14, 2008 at 02:02:24PM +0200, Jan Hauke Rahm wrote:
> > Dear Jonathan,
> > 
> > please see #498901 for a patch. I just created one patch because it's
> > quite short and understandable.
> 
> Thanks. I haven't dealt with this bug because we're in freeze and the
> script is in /usr/share/doc/smsclient/examples; ie it's not installed on
> the system for users to use. As such I don't feel it's a blocker for the
> release goal of dash as /bin/sh. Also I don't feel #498901 counts as a
> security issue; it seems the release team agree as they've retagged it
> important. I'll deal with both in my next smsclient upload of course.

To be honest, I saw that this is just documentation when I was nearly
done with it. :) I considered it to be security related because users
could c&p without taking a deeper look (or even without understanding
anything). The severity was not grave, though, so I agree completely.

Cheers,
Hauke

Attachment: signature.asc
Description: Digital signature

Reply via email to