Re: Bug#922384: jessie-pu: package gsoap/2.8.17-1+deb8u2

[Chris Lamb <lamby@debian.org>]

Ben Hutchings wrote:


> Given the reference to cookies in the upstream advisory, I think the
> actual bug is

[…]

Thanks for looking into this. For the avoidance of doubt I will not
proceed with an upload. 

With my "front desk" hat on, I've also added a link in the data/
CVE/list to this thread as it discusses the merits of the patch:

  https://salsa.debian.org/security-tracker-team/security-tracker/commit/f9c0c26172f864a9fb70c332d61dabd72b47a56e


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-