Re: Bug#972189: sympa: CVE-2020-10936 regression - removal of needed environment variables

2020-10-15 Thread Sylvain Beucler
Hi, Thank you both for notifying me. For reasons stated in dla-needed.txt, and more importantly for reasons mentioned internally (see elts-git or Holger), I can't dedicate more time this month. >From a quick look: - the patch for older versions is the same besides the copyright notices. - I'm

Re: Bug#972189: sympa: CVE-2020-10936 regression - removal of needed environment variables

2020-10-15 Thread Holger Levsen
Hi, On Thu, Oct 15, 2020 at 10:20:14AM +0200, Sylvain Beucler wrote: > For reasons stated in dla-needed.txt, and more importantly for reasons > mentioned internally (see elts-git or Holger), I can't dedicate more > time this month. Sylvain, thanks for being explicit! (and still giving it a quick