I've seen the 1.9.1 release and was about to package it for Debian, when I had a look at the individual commits from #27. Well, some of those seem bad enough to even warrant some CVEs being issued.
But at least, the ChangeLog should be updated to mention these issues individually, and have some [SECURITY] markers all around the place, even with
If #28 is fixed, I think that could also make up for a 1.9.2.
Hi Yeraze,
I've seen the 1.9.1 release and was about to package it for Debian, when I had a look at the individual commits from #27. Well, some of those seem bad enough to even warrant some CVEs being issued.
But at least, the ChangeLog should be updated to mention these issues individually, and have some [SECURITY] markers all around the place, even with
If #28 is fixed, I think that could also make up for a 1.9.2.
Thanks!