Control: tags -1 - moreinfo On 12/17/2016 12:43 PM, Julien Cristau wrote: > On Fri, Dec 16, 2016 at 09:47:12 +0100, Sebastiaan Couwenberg wrote: > >> On 12/06/2016 10:00 PM, Sebastiaan Couwenberg wrote: >>> Sorry for the outdated debdiff, for p-u the distribution has been >>> changed to stable. >> >> With mapserver (7.0.3-1) having migrated to testing and the subsequent >> update of the backport, CVE-2016-9839 is now fixed everywhere except in >> jessie itself. I'd like to fix that, can I go ahead? >> > That has apparently been known for over two and a half years, is there a > particular reason this is now urgent?
It wasn't known widely until recently, and the MapServer developers asked me to update the package now that the fixed releases have been published. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1
