Comment 15 for bug 7674

Message-ID: <email address hidden>
Date: Sun, 5 Sep 2004 22:18:02 -0400
From: Luke Schierer <email address hidden>
To: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <email address hidden>, <email address hidden>
Subject: Re: Bug#268783: Is this bug present in woody?

On Sun, Sep 05, 2004 at 10:54:12AM +0200, Javier Fern�ez-Sanguino Pe�rote:
> On Sun, Sep 05, 2004 at 04:06:09AM +0100, Colin Watson wrote:
> > On Thu, Sep 02, 2004 at 10:44:36AM +0200, Javier Fern�ez-Sanguino Pe�rote:
> > > reopen 268783
> > > thanks
> > >
> > > I know we are close to release, but is this bug present in woody?
> >
> > Please, please update the bug's tags when you do this kind of thing.
>
> Sorry, for not doing that, there's no excuse.
>
> FWIW, I tried to review the code in woody but there have been a lof of
> changes from woody's 0.52 to sid's 0.82 and the precise changes done to the
> CVS are not easy to trace (I don't find CVS logs with big SECURITY message

you won't, the fixes were by and large intentionally downplayed in the
cvs commits.

> commits in them). I've investigated some vulnerabilities and they don't
> seem to apply to the woody version because the functionality was not
> present there (in the case of the MSN stuff) but I can't tell for sure.

for all I know debian policy, and even mostly agree with the reasons for
it, 0.5x is incredibly ancient, and by and large won't even work because
of chagnes to the protocols.

luke
gaim support

>
> Regards
>
> Javier