Re: Fixing CVE-2017-1000426 in mapproxy for stretch

[Sebastiaan Couwenberg <sebastic@xs4all.nl>]

Hi Moritz,

On 01/07/2018 10:09 PM, Moritz Mühlenhoff wrote:
> On Sun, Jan 07, 2018 at 09:53:54AM +0100, Sebastiaan Couwenberg wrote:
>> After noticing the mapproxy security issue in the tracker I've gone
>> ahead and backported the upstream patch for the 1.9.0 package in
>> stretch. See the attached debdiff.
> 
> Thanks for reaching out proactively! But that doesn't warrant a DSA,
> the impact is fairly limited.
> 
> Could you please fix this through a stretch point update instead?

Thanks for the feedback, stretch-pu filed: #886589.

Kind Regards,

Bas