>> Another option:
>> What about debian stable? Is 1.4.2-6 (etch) going to be patched, if so,
>> can we draw from the effort there?
>
> kcr was working on Debian stable updates. I don't know what his current
> status is for those. I haven't had time to look at them personally,
> unfortunately.
Oh, sorry, it was noahm who was working on this. He just got a CVE
assigned (CVE-2007-6599) and is working on an update now.
Russ Allbery <email address hidden> writes:
> Johan Christiansen <email address hidden> writes:
>> Another option:
>> What about debian stable? Is 1.4.2-6 (etch) going to be patched, if so,
>> can we draw from the effort there?
>
> kcr was working on Debian stable updates. I don't know what his current
> status is for those. I haven't had time to look at them personally,
> unfortunately.
Oh, sorry, it was noahm who was working on this. He just got a CVE
assigned (CVE-2007-6599) and is working on an update now.
-- www.eyrie. org/~eagle/>
Russ Allbery (<email address hidden>) <http://