[Pkg-trac-devel] Security updates for CVE-2008-{2951,3328}

[Roberto C. Sánchez]

I am using trac on Etch on one of my servers.  I was recently alerted by
one of my users to these two CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2951
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3328

I notice that last update to trac in Etch has a changelog entry dated
May 21, 2008.  Is an updated being prepared for these two CVEs?  Should
I file a bug against the package (there is currently no bug filed)?

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-trac-devel/attachments/20080809/2d33746e/attachment-0001.pgp