>>>>> Steve Kemp <s...@debian.org> writes:

Hi,

    >   Did you  see the followup discussion from  Secunia about another
    > planet-problem, relating to the handling of CDATA ?

No I didn't, I could not find this discussion, could you please point it
me out?   As soon as all these  issues will have been  addressed, I will
prepare  a  package (debian-security  team:  please  do  not upload  the
package for now).

    >   (To be honest  if I were to re-do the patch  now I'd probably do
    > it the other way round : Make sure "src"starts with http: to cover
    > other cases too.)

As  the debian-security  team has  not replied  yet, maybe  it  is still
possible to update the patch?

Cheers,
Arnaud Fontaine

Attachment: pgpXzbHbh73ni.pgp
Description: PGP signature

Reply via email to