[php-maint] Bug#316447: packages for sarge?
jelly at srce.hr
Mon Aug 22 18:30:18 UTC 2005
CC-ing the security team as suggested on #debian.
Explanation: this security related bug in XML_RPC, part of php4-pear
package, has been closed by an upload to unstable, but the version in
sarge is still affected.
Quoting Zoran Dzelajlija (jelly at srce.hr):
> Hi, any word of a sarge release to cover CAN-2005-1921 and, to kill two
> flies, the new XML_RPC bug CAN-2005-2498? I've applied Ubuntu's
> patches for both to a local build without much hassle...
> Also, is there some user-friendly documentation aobut the new BTS
> features (found vs. tagging for sarge)? Should this bug be reopened
> until sarge gets a fix for these vulnerabilities?
More information about the pkg-php-maint