Control: tags -1 + pending On Sun, 2013-06-30 at 21:38 +0100, Adam D. Barratt wrote: > On Sun, 2013-06-30 at 22:26 +0200, Cédric Boutillier wrote: > > As a follow-up of a security bug [1], I have been advised to provide a > > fix of this package through oldstable-proposed-updates. The proposed > > update applies a patch from upstream which prevents possible XML denial > > of service attacks by limiting the size of fetched file and disabling > > XML entity expansion. > > Please go ahead; thanks.
Flagged for acceptance. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1372801551.1015.6.ca...@jacala.jungle.funky-badger.org
