>>>>> Steve Kemp <s...@debian.org> writes: Hi,
> Did you see the followup discussion from Secunia about another > planet-problem, relating to the handling of CDATA ? No I didn't, I could not find this discussion, could you please point it me out? As soon as all these issues will have been addressed, I will prepare a package (debian-security team: please do not upload the package for now). > (To be honest if I were to re-do the patch now I'd probably do > it the other way round : Make sure "src"starts with http: to cover > other cases too.) As the debian-security team has not replied yet, maybe it is still possible to update the patch? Cheers, Arnaud Fontaine
pgpXzbHbh73ni.pgp
Description: PGP signature