Re: Fixing CVE-2017-1000426 in mapproxy for stretch

[Moritz Mühlenhoff <jmm@inutil.org>]

Hi Sebastiaan,

On Sun, Jan 07, 2018 at 09:53:54AM +0100, Sebastiaan Couwenberg wrote:
> Dear Security Team,
> 
> After noticing the mapproxy security issue in the tracker I've gone
> ahead and backported the upstream patch for the 1.9.0 package in
> stretch. See the attached debdiff.

Thanks for reaching out proactively! But that doesn't warrant a DSA,
the impact is fairly limited.

Could you please fix this through a stretch point update instead?
See https://www.debian.org/doc/manuals/developers-reference/ch05.html#upload-stable

Cheers,
        Moritz