Bug#631529: Missing fix for CVE-2010-1447

Moritz Muehlenhoff jmm at inutil.org
Wed Jun 29 15:30:08 UTC 2011


On Wed, Jun 29, 2011 at 02:10:17PM +0300, Niko Tyni wrote:
> On Tue, Jun 28, 2011 at 06:28:52PM +0200, Moritz Muehlenhoff wrote:
> 
> > Ahh, I forgot that mail. Personally I would think the perl update is
> > more important than Petal, which is dead upstream and has hardly
> > any users in popcon. We can add a note to the DSA, so that people
> > who really need it can set the old Perl package on hold. If there's
> > no fix for Petal in the next months it can be removed in a point
> > update.
> 
> Fine by me.

Ok, seems there's no objections from pkg-perl. Dominic, feel free to
upload to security-master once the update is ready.

Cheers,
        Moritz






More information about the Perl-maintainers mailing list