On Sun, Feb 24, 2008 at 07:12:04PM +0100, Pascal Hambourg wrote:
OK thanks very much Pascal.
I'm reverting the patch for the moment and will release 2.4.36.2 without
it.
Dann, it looks like the backport of the fix causes more trouble than it
attempts to fix :-/
(Un)fortunately I had no problem here, so I think it's not that easy to
reproduce the issue. If the fix is too hard to get right and the risk
of vulnerability very low, don't you think we should simply leave it
unfixed, at least until we really understand the nature of the problem ?
Thanks,
Willy
--