Control: tags -1 + confirmed On Thu, 2021-05-13 at 11:16 +0100, Chris Lamb wrote: > Please consider velocity (1.7-5+deb10u1) for buster: > > velocity (1.7-5+deb10u1) buster; urgency=medium > . > * CVE-2020-13936: Prevent a potential arbitrary code execution > vulnerability > that can be exploited by applications that allow untrusted > users to > upload/modify Velocity templates. (Closes: #985220) >
Please go ahead. Regards, Adam