Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
MIME-Version: 1.0
In-Reply-To: <10C6EFD5-E48C-423D-873C-2FB50486A9CD@apache.org>
References: 
 <CAPaJBx6WDL5h63ZP0-a63KysdtWJMuxhKEufRJxeGTJX6oFyyQ@mail.gmail.com>
	<EAD9CDEC-90BB-4654-9C38-2607C1338B8F@apache.org>
	<10C6EFD5-E48C-423D-873C-2FB50486A9CD@apache.org>
Date: Wed, 27 Feb 2013 12:14:19 +0000
Message-ID: 
 <CAPaJBx4N_3mMneFUxi151zuqeYSe9vyP9-wU5yAht3pRQEKvVA@mail.gmail.com>
Subject: Re: Fix for CVE-2010-3854
From: Noah Slater <nslater@apache.org>
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>
Content-Type: multipart/alternative; boundary=e89a8f646d15bb99df04d6b3b6b7

--e89a8f646d15bb99df04d6b3b6b7
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks Jan. We'll update procedure accordingly.


On 27 February 2013 12:06, Jan Lehnardt <jan@apache.org> wrote:

> Note: we didn=92t have these as our procedure for handling these
> didn=92t include an item "update NEWS & CHANGES". I believe that we
> should have done this *and* keept a record which commit(s) reflect
> which CVEs for later reference.
>
> On Feb 27, 2013, at 13:04 , Jan Lehnardt <jan@apache.org> wrote:
>
> > Confirmed.
> >
> > On Feb 25, 2013, at 21:19 , Noah Slater <nslater@apache.org> wrote:
> >
> >> Hey,
> >>
> >> When did the fix for CVE-2010-3854 land? From the disclosure, it looks
> like
> >> 1.0.2. It is not mentioned in any NEWS or CHANGES.
> >>
> >> Please confirm 1.0.2. is correct.
> >>
> >> Thanks,
> >>
> >> --
> >> NS
> >
>
>


--=20
NS

--e89a8f646d15bb99df04d6b3b6b7--