[Pkg-varnish-devel] Bug#728989: Bug#728989: varnish: CVE-2013-4484

[Salvatore Bonaccorso]

Hi Stig,

On Mon, Dec 02, 2013 at 09:46:29PM +0100, Salvatore Bonaccorso wrote:
> Hi,
> 
> On Mon, Dec 02, 2013 at 09:52:01PM +0100, Stig Sandbeck Mathisen wrote:
> > Salvatore Bonaccorso <carnil at debian.org> writes:
> > 
> > > Thanks for fixing this with the 3.0.5-1 upload. Could you please also
> > > prepare packages for squeeze-security and wheezy-security? I did
> > > already had a look at wheezy today, attached is proposed debdiff (but
> > > not yet tested apart the testsuite).
> > 
> > Thanks for the debdiff. I'll take a look at it.
> 
> Thanks.
> 
> > Do you, by any chance, have this as a git commit available somewhere?
> 
> Yes, sure. Attaching a format-patch from my local copy.

And attached also the one for squeeze-security. Unless something
obvious broken or regression with these, I plan to prepare a DSA for
these.

(It passes all the testsuite so far).

Regards,
Salvatore
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-CVE-2013-4484.patch-patch.patch
Type: text/x-diff
Size: 4036 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-varnish-devel/attachments/20131207/a79cc648/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-varnish-devel/attachments/20131207/a79cc648/attachment.sig>