Re: py-jinja2 vulnerability

To: "pkgsrc-users%netbsd.org@localhost" <pkgsrc-users%netbsd.org@localhost>
Subject: Re: py-jinja2 vulnerability
From: "OBATA Akio" <obata%lins.jp@localhost>
Date: Tue, 13 May 2014 14:44:29 +0900

On Tue, 13 May 2014 13:02:57 +0900, matthew sporleder 
<msporleder%gmail.com@localhost> wrote:

according to
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734747

this pkg is no longer vulnerable.  I wasn't sure if there was a
procedure for updating pkg-vulnerabilities (or validating my regex).

Can someone help me out?


py-jinja2-2.7.2 fixes CVE-2014-1402 but introduce CVE-2014-0012, right?

--
OBATA Akio / obata%lins.jp@localhost

References:
- py-jinja2 vulnerability
  - From: matthew sporleder

Prev by Date: py-jinja2 vulnerability
Next by Date: Powiadomienie Awaryjne!!!
Previous by Thread: py-jinja2 vulnerability
Next by Thread: Powiadomienie Awaryjne!!!
Indexes:

Home | Main Index | Thread Index | Old Index