[Secure-testing-team] ekg: CAN-2005-1916 Bug#317027 and #318059

[Joey Hess]

Marcin Owsiany wrote:
> During fixing the bug in linki.py with upstream author, we have found
> and fixed similar and other security-related bugs in other
> user-contributed scripts.
> 
> 1.6rc2 is released, which fixes them all. I want to upload it to
> unstable, and backport the fixes to stable. However before that, I would
> like to know whether I should request another CAN ID for the newly
> discovered bugs? I mean - what is best for you - the security teams in
> terms of tracking the bug later?

It doesn't really matter for the testing security team since we're
already tracking both bugs. If you upload to unstable without the CAN
number you can always add it later.

-- 
see shy jo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20050714/b0f9ac38/attachment.pgp