On Tue, Sep 21, 2004 at 08:44:10AM +0200, Moritz M=FChlenhoff wrote:
> Branden Robinson wrote:
> > (In the future, please don't file bugs against unsupported or unreleased
> > versions of Debian packages. I have no idea what libxpm4
> > "4.3.0-0pre1v5.49.200406160839" is. Whoever shipped that package is the
> > proper recipient of your bug report.)
>=20
> It's an internal versioning scheme, sorry for the confusion. I checked
> it against sid, although it has been sent off a machine running the
> above version.
You can edit the reported version number, of course.
I'm just trying to reinforce a good habit -- I'm aware that pretty much
every version of libXpm ever released has this flaw.
However, many bugs reported against XFree86 don't have such universal
applicability, so I attempt to reinforce sound bug-reporting practices. :)
--=20
G. Branden Robinson | It may be difficult to to determine
Debian GNU/Linux | where religious beliefs end and
<email address hidden> | mental illness begins. http://people.debian.org/~branden/ | -- Elaine Cassel
--n2Pv11Ogg/Ox8ay5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
Message-ID: <email address hidden>
Date: Mon, 27 Sep 2004 17:26:06 -0500
From: Branden Robinson <email address hidden>
To: <email address hidden>
Subject: Re: Bug#272493: libxpm4 security problem
--n2Pv11Ogg/Ox8ay5 Disposition: inline Transfer- Encoding: quoted-printable
Content-Type: text/plain; charset=iso-8859-1
Content-
Content-
On Tue, Sep 21, 2004 at 08:44:10AM +0200, Moritz M=FChlenhoff wrote: 0pre1v5. 49.200406160839 " is. Whoever shipped that package is the
> Branden Robinson wrote:
> > (In the future, please don't file bugs against unsupported or unreleased
> > versions of Debian packages. I have no idea what libxpm4
> > "4.3.0-
> > proper recipient of your bug report.)
>=20
> It's an internal versioning scheme, sorry for the confusion. I checked
> it against sid, although it has been sent off a machine running the
> above version.
You can edit the reported version number, of course.
I'm just trying to reinforce a good habit -- I'm aware that pretty much
every version of libXpm ever released has this flaw.
However, many bugs reported against XFree86 don't have such universal
applicability, so I attempt to reinforce sound bug-reporting practices. :)
--=20 people. debian. org/~branden/ | -- Elaine Cassel
G. Branden Robinson | It may be difficult to to determine
Debian GNU/Linux | where religious beliefs end and
<email address hidden> | mental illness begins.
http://
--n2Pv11Ogg/Ox8ay5 pgp-signature; name="signature .asc" Description: Digital signature Disposition: inline
Content-Type: application/
Content-
Content-
-----BEGIN PGP SIGNATURE-----
Yk34ACgkQ6kxmHy tGonyHFgCfbSm55 pgFIBnSIWtalGRL 9NuH hpcaEXDuLZmH7KJ BN
Version: GnuPG v1.2.5 (GNU/Linux)
iEYEARECAAYFAkF
EzQAoIqDoyi3Zh0
=1s6T
-----END PGP SIGNATURE-----
--n2Pv11Ogg/ Ox8ay5- -