tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: upgrading xmlrpc-c



On Wed, Nov 14, 2012 at 10:45 AM, Adam Ciarciński <adam%netbsd.org@localhost> 
wrote:
>> Package xmlrpc-c-ss-1.16.42 has a denial-of-service vulnerability.  It
>> is also four years old.  Is there any reason we don't upgrade it to
>> 1.32?
>
> Just updated to 1.16.43.
> We use a super-stable branch, that's why it's not 1.32.

Adam,

Can you confirm that this update fixes http://secunia.com/advisories/50648/ ?

Thanks,

 - Tim


Home | Main Index | Thread Index | Old Index