Richard Atterer wrote:
> > Since CVE-2009-2625 doesn't allow code injection, but only DoS and given
> > that libwww in oldstable is only used by wmweather, I think we can ignore
> > it, unless Nico wants to work on an update?
>
> Well, I've already prepared new versions of the packages, although they are
> completely untested ATM, except that I had a look at them with
> debdiff/interdiff: <http://atterer.net/libwww/>
Please upload this for a oldstable point update. Please use
distribution=oldstable
and file a bug against release.debian.org (with reportbug from
testing/unstable),
so that the stable release managers can ack the upload.
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]