[Pkg-awstats-devel] security update

[Jonas Smedegaard]

On Sat, 6 May 2006 17:46:18 -0400 Charles Fry wrote:

> I have commited the security patches suggested from upstream into
> subversion for 6.5. The one which might merit discussion is the
> disable_configdir patch, though it seems to me to be the best general
> purpose solution to the problem at hand.
> 
> Jonas, can you please have a look at these? If they look okay you can
> upload this to unstable, and we can add the patches to stable as well,
> and get a security announcement about this.

Looks good to me!


> What is the best way to announce the configdir change to those who
> install the updated packages?

A NEWS.Debian entry about both possible consequences of the change and
the reasoning behind it.

It is a conffile, so all (sane) users is noted that something is
happening, and even if not using apt-listchanges can go read that file
manually.


I'll wait uploading, letting you add a NEWS.Debian entry... :-)

 - Jonas

-- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

 - Enden er n_r: http://www.shibumi.org/eoti.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-awstats-devel/attachments/20060507/4cab4401/attachment.pgp