On Sat, Sep 20, 2008 at 08:40:02AM +1000, Sven Dowideit wrote: > This is _not_ a grave severity issue in the debian package, specifically > because configure (as mentioned in the advisory) is locked down using > apache to > 1 localhost > 2 an admin user that is created by the installer. >
... well, at least for version in lenny (4.1.2-4), since we have fixed #485562 previously (I'm glad we did, then ;). Just my 2 cents. Best regards, -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]