On Fri Sep 18, 2009 at 13:38:39 +0200, Arnaud Fontaine wrote: > I have prepared yesterday a package for Lenny including this patch. At > the moment, I'm waiting for a reply from the debian-security team.
Great. Don't forget etch to. > Thank you very much for the patch and bug report. Did you see the followup discussion from Secunia about another planet-problem, relating to the handling of CDATA ? (To be honest if I were to re-do the patch now I'd probably do it the other way round : Make sure "src"starts with http: to cover other cases too.) Steve -- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
