Re: Albatross 1.33 released

--===============1690840677==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="=-3JZCU8NcbjVjhdjaAItZ"


--=-3JZCU8NcbjVjhdjaAItZ
Content-Type: multipart/mixed; boundary="=-WQNDnr4CJ8N35Sv9z4zT"


--=-WQNDnr4CJ8N35Sv9z4zT
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Wed, 2006-01-04 at 11:53 +1100, Andrew McNamara wrote:
> I apologise for not posting a notification of this earlier. Fabian -
> a backport of the fix to stable's version 1.20 should be easy enough -
> are you happy doing this?

Sure: I'm now working on getting the Debian stable 1.20 version
security-updated.

Can anyone think of any changes beside the ones in albatross/context.py
that affect the security issue? If not, I'm going to move forward with
the attached patch being the only code change. It's simply a diff for
context.py from 1.32 to 1.33, adjusted to apply cleanly to 1.20 (only
the line numbers have changed).

Cheers,
--=20
Fabian Fagerholm <[email protected]>

--=-WQNDnr4CJ8N35Sv9z4zT
Content-Disposition: attachment; filename=1.20.diff
Content-Type: text/x-patch; name=1.20.diff; charset=iso-8859-1
Content-Transfer-Encoding: base64
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--=-WQNDnr4CJ8N35Sv9z4zT--

--=-3JZCU8NcbjVjhdjaAItZ
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDvRkC76VUNpZBmeIRAqlKAJ4zylHeM0Sg+tD5tZIawYyynofDNwCfdL3z
zBO5yGvnfxSEcriTW1BcLMk=
=iH2g
-----END PGP SIGNATURE-----

--=-3JZCU8NcbjVjhdjaAItZ--


--===============1690840677==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Albatross-users mailing list
[email protected]
https://www.object-craft.com.au/cgi-bin/mailman/listinfo/albatross-users

--===============1690840677==--