[Secure-testing-team] Bits from the Testing Security team

[Nico Golde]

Hi Julien,
* Julien BLACHE <jblache at debian.org> [2007-10-15 11:04]:
> Stefan Fritsch <sf at debian.org> wrote:
[...] 
> iaxmodem embeds copies of spandsp and libiax.
> 
>  - spandsp is a recent CVS snapshot with patches specific to
>    iaxmodem, some of them having no chances of being integrated
>    upstream at all (specific hooks)
> 
>  - libiax is a patched version of one of the 3 or 4 different libiax
>    available; it contains a number of iaxmodem-specific patches &
>    enhancements. Again, won't make it upstream any time soon, that
>    would mean getting the 3 or 4 different libiax to merge and that's
>    just not possible (different people have tried, myself included,
>    and we couldn't get the upstreams to agree on something)
[...] 
After discussing in private mail with Julien we came to the 
conclusion that spandsp will be hardly relevant from the 
security point of view so I added libiax to our list.
Kind regards and thanks for reporting
Nico
-- 
Nico Golde - http://ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20071015/bed13f34/attachment.pgp