[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: #774748: ruby-redcloth: CVE-2012-6684



On Fri, Jan 09, 2015 at 10:57:13PM +0100, Christian Hofstaedtler wrote:
> AFAICT there is no publicly available patch, and upstream is more or
> less "dead".
> 
> Redmine's patched redcloth3 looks very different from the current
> redcloth 4.x sources, so I have my doubts if forward porting this
> is feasible.
> 
> Suggestions welcome.

Then we should remove it from jessie.

Cheers,
        Moritz


Reply to: