Re: Bug#684388: agentx: CVE-2014-2310: Oversized Object ID

2014-03-19 Thread Julien Cristau
On Wed, Mar 19, 2014 at 15:57:12 +0100, Simon Paillard wrote: > debian-security team prefers this bug in stable to be addressed using a > upload > in spu instead of issuing a DSA. > > Do you agree with this ? > > As you can see in the bug report and debdiff, the patch is very localized, and >

Re: Bug#684388: agentx: CVE-2014-2310: Oversized Object ID

2014-03-19 Thread Simon Paillard
Hello Release team, On Mon, Mar 17, 2014 at 09:46:50PM +0100, Simon Paillard wrote: > On Thu, Mar 06, 2014 at 02:43:34PM +0100, Simon Paillard wrote: > > On Thu, Aug 09, 2012 at 01:32:37PM +0200, Vincent Bernat wrote: > > > AgentX support is ineffective when a manager requests unrelated OID in > >