Bug#698735: CVE-2012-5530

[Salvatore Bonaccorso <carnil@xxxxxxxxxx>]

# fixed in 3.6.10 upstream, first upload to Debian with 3.7.1
Control: fixed -1 3.7.1

Hi Nathan

On Tue, Mar 19, 2013 at 07:48:59PM -0400, Nathan Scott wrote:
> Hi all,
> 
> This is not getting any traction & in danger of being forgotten -
> can anyone help out who knows the security update build process?
> The patches have been prepared, tested, and are ready in the git
> tree (below) - but I need some help to get it over the line.
> 
> thanks!!

Only an update... In the security-tracker CVE-2012-5530[1] was marked
as no-dsa. This means there will not be a security announce update via
stable-security. But could you prepare a fix for it for Squeeze via a
stable-proposed-updates?

See [2] for further information on that.

 [1]: https://security-tracker.debian.org/tracker/CVE-2012-5530
 [2]: 
http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable

Does this helps?

p.s.: Don't know if it was discussed previously already, with 2.8.0
upload the package is now a Debian native package. See [3]. Was this
intentional? Or would it be possible to convert the package to a
non-native source package?

 [3]: 
http://www.debian.org/doc/manuals/developers-reference/pkgs.html#sourcelayout

Thanks for your work done!

Regards,
Salvatore