[Secure-testing-team] Please unblock gallery 1.5.9-1

Neil McGovern neilm at debian.org
Tue Sep 30 10:34:30 UTC 2008


On Mon, Sep 29, 2008 at 10:41:15AM -0400, Michael Schultheiss wrote:
> Please unblock gallery 1.5.9-1.  This is a security release that fixed
> CVE-2008-3662 and CVE-2008-4129.  The CVE's were not listed in the
> changelog since I did not know the CVE numbers when the package was
> built.
> 

Gah.
Images have changed, $Id$ changes and whitespace formatting, as well as things like:

-               $gallery->user->canCreateSubAlbum($gallery->album)) {
+                       $gallery->user->canCreateSubAlbum($gallery->album))
+               {

Some pofiles also seem to have dissapeared.

This all leads to:
 828 files changed, 43756 insertions(+), 431897 deletions(-)

I'm not reviewing this, sorry.

s-t team: if someone can do so, I'll hint it in. Otherwise, I'll need a DTSA please.

Neil
-- 
<Yoe> is _that_ gunnar?
<weasel> yes
<Yoe> what happened to his tires?
<towersbe> He's shrunk. I think his wife washed him at too high a temperature.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20080930/38c4be49/attachment.pgp 


More information about the Secure-testing-team mailing list