Control: tags -1 + confirmed On Thu, 2015-11-05 at 14:10 -0400, David Prévot wrote: > As agreed with the security team, the two XSS fixes from the latest > upstream version do not deserve a DSA, yet I’d like to fix them via pu > if you agree, debdiff attached. There is no upstream fix available (yet) > for the 2.1 branch (that is still supported), so I won’t follow up with > a pu request for Wheezy for the moment.
Please go ahead; sorry for the delay. Regards, Adam