Control: tag -1 moreinfo On Fri, Dec 16, 2016 at 09:47:12 +0100, Sebastiaan Couwenberg wrote:
> On 12/06/2016 10:00 PM, Sebastiaan Couwenberg wrote: > > Sorry for the outdated debdiff, for p-u the distribution has been > > changed to stable. > > With mapserver (7.0.3-1) having migrated to testing and the subsequent > update of the backport, CVE-2016-9839 is now fixed everywhere except in > jessie itself. I'd like to fix that, can I go ahead? > That has apparently been known for over two and a half years, is there a particular reason this is now urgent? Cheers, Julien