[php-maint] Bug#316447: packages for sarge?

Zoran Dzelajlija jelly at srce.hr
Mon Aug 22 18:30:18 UTC 2005

CC-ing the security team as suggested on #debian.

Explanation: this security related bug in XML_RPC, part of php4-pear
package, has been closed by an upload to unstable, but the version in
sarge is still affected.

Quoting Zoran Dzelajlija (jelly at srce.hr):
> Hi, any word of a sarge release to cover CAN-2005-1921 and, to kill two
> flies, the new XML_RPC bug CAN-2005-2498?  I've applied Ubuntu's
> patches for both to a local build without much hassle...
> Also, is there some user-friendly documentation aobut the new BTS
> features (found vs. tagging for sarge)?  Should this bug be reopened
> until sarge gets a fix for these vulnerabilities?
> Regards,
> Zoran


More information about the pkg-php-maint mailing list