Secure testing team - Feb 2008 - CVE-2008-0664: wordpress update blocked by release hint

Hi,

Are you guys aware that the fix for CVE-2008-0664 is kept out of Lenny
by "block" release hint by luks? I''m not sure what the
purpose of that
hint was, but probably not to keep lenny vulnerable.

Note that I''ll do an upload shortly to add French support back in,
which was accidentally removed in the last upload. I''ll also add the
CVE number to the changelog retroactively.

Sorry for the dupe if Kai already contacted you about this.

-- 
Lionel

Hi Lionel,
* Lionel Elie Mamane <lionel at mamane.lu> [2008-02-09
13:13]:
> Are you guys aware that the fix for CVE-2008-0664 is kept out of Lenny
> by "block" release hint by luks? I''m not sure what the
purpose of that
> hint was, but probably not to keep lenny vulnerable.
I already poked Luk in #debian-security yesterday because of 
this, waiting for an answer.
Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20080209/97af5d76/attachment.pgp