Comment 21 for bug 14171

Message-ID: <email address hidden>
Date: Tue, 22 Mar 2005 13:09:12 +0100
From: Martin Pitt <email address hidden>
To: Frank =?iso-8859-1?Q?K=FCster?= <email address hidden>
Cc: <email address hidden>, Joey Hess <email address hidden>,
 Hilmar Preusse <email address hidden>
Subject: Re: Bug#300182: tetex-bin still vulnerable to CAN-2004-0888 (CAN-2005-0206)

--HcAYCG3uE/tztfnV
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi!

Frank K=FCster [2005-03-22 12:49 +0100]:
> Martin, good to hear that. Did you also read the other messages in this
> thread, namely Hamish's confusion about CAN-2004-0888 vs. CAN-2004-0889?

He is certainly not the only one who is confused about these. All
patches that I ever saw fix both CANs, and the description of both
CANs are nearly identical. I really don't know which particular fix
belongs to which CAN.

> And, by the way, why didn't you answer to the bug, or the security
> list(s)?=20

Hmm, I replied to <email address hidden> and I can see my
reply at

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D300182

Didn't you get this mail? If not, I shall probably reply to
<email address hidden> in addition, but I thought this would happen
automatically.

Martin

--=20
Martin Pitt http://www.piware.de
Ubuntu Developer http://www.ubuntulinux.org
Debian Developer http://www.debian.org

--HcAYCG3uE/tztfnV
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCQAroDecnbV4Fd/IRAjLnAJwJmvXiLldXhutmdxPQUKfxlkY1/wCgnSPy
K9+8fZ91eQpw6vgGl/4TujA=
=TqgV
-----END PGP SIGNATURE-----

--HcAYCG3uE/tztfnV--