Comment 3 for bug 682549

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thanks for your patch Micah!

In comparing your debdiff with Debian's 1.2.11-4, I noticed that Debian also contains 27_fix-RPC-crash.patch, which doesn't have a CVE yet but does seem to be security relevant. Would you mind adding 27_fix-RPC-crash.patch to your debdiff. Also it would be great if you gave more credit to Debian in the changelog. You did a fine job with that in the DEP-3 comments, but a simple 'Patch thanks to Debian' or similar in the changelog would be good.

Unsubscribing ubuntu-security-sponsors. Please resubscribe ubuntu-security-sponsors and set the status to 'NEW' when the changes are complete. Thanks again!