On Mon, Dec 03, 2018 at 08:17:44AM +0100, Julien Cristau wrote: > Control: tag -1 confirmed > > On Fri, Nov 16, 2018 at 12:57:27PM +0000, Dominic Hargreaves wrote: > > diff -Nru libapache2-mod-perl2-2.0.10/debian/changelog > > libapache2-mod-perl2-2.0.10/debian/changelog > > --- libapache2-mod-perl2-2.0.10/debian/changelog 2016-12-25 > > 09:51:10.000000000 +0000 > > +++ libapache2-mod-perl2-2.0.10/debian/changelog 2018-11-16 > > 12:46:23.000000000 +0000 > > @@ -1,3 +1,10 @@ > > +libapache2-mod-perl2 (2.0.10-2+deb9u1) UNRELEASED; urgency=medium > > + > > + * [SECURITY] CVE-2011-2767: don't allow <Perl> sections in > > + user controlled configuration (Closes: #644169) > > + > > + -- Dominic Hargreaves <d...@earth.li> Fri, 16 Nov 2018 12:46:23 +0000 > > + > > libapache2-mod-perl2 (2.0.10-2) unstable; urgency=medium > > > > * Patch the test suite for Apache 2.4.24 compatibility. > > With s/UNRELEASED/stretch/, and assuming this has been tested in > stretch, go ahead.
Hi, Sorry for the long delay, now done - yes, it has been tested in stretch. Best, Dominic.