Bug#804172: jessie-pu: package spip/3.0.17-2+deb8u1
Control: tags -1 + confirmed
On Thu, 2015-11-05 at 14:10 -0400, David Prévot wrote:
> As agreed with the security team, the two XSS fixes from the latest
> upstream version do not deserve a DSA, yet I’d like to fix them via pu
> if you agree, debdiff attached. There is no upstream fix available (yet)
> for the 2.1 branch (that is still supported), so I won’t follow up with
> a pu request for Wheezy for the moment.
Please go ahead; sorry for the delay.
Regards,
Adam
Reply to: