Hi Sorry for the delay, but I was relocating to Australia, which unfortunately takes some time :/
> > On Wed Jul 09, 2008 at 12:04:01 +0200, Wichert Akkerman wrote: > >> I see CVE-2008-2960 reported in the BTS as #489756 but I see no mention > >> of a fix for stable. Is someone working on a DSA for stable? > > > > There isn't one in progress. Tonight there will be a release of > > an update to handle CVE-2008-1693. I guess that will be the next > > one. > > thanks for the update. I'll (im)patiently await the CVE-2008-2960 DSA. etch is not affected by this vulnerability, thus I didn't include it in the latest DSA upload. The DTSA was prepared, because it was vulnerable in lenny and the issue was embargoed, thus no fix could be uploaded to unstable yet. I have now marked it in the tracker accordingly. Hope this information helps. Cheers Steffen
signature.asc
Description: This is a digitally signed message part.