Bug#913885: stretch-pu: package libapache2-mod-perl2/2.0.10-2+deb9u1
Control: tag -1 confirmed
On Fri, Nov 16, 2018 at 12:57:27PM +0000, Dominic Hargreaves wrote:
> diff -Nru libapache2-mod-perl2-2.0.10/debian/changelog libapache2-mod-perl2-2.0.10/debian/changelog
> --- libapache2-mod-perl2-2.0.10/debian/changelog 2016-12-25 09:51:10.000000000 +0000
> +++ libapache2-mod-perl2-2.0.10/debian/changelog 2018-11-16 12:46:23.000000000 +0000
> @@ -1,3 +1,10 @@
> +libapache2-mod-perl2 (2.0.10-2+deb9u1) UNRELEASED; urgency=medium
> +
> + * [SECURITY] CVE-2011-2767: don't allow <Perl> sections in
> + user controlled configuration (Closes: #644169)
> +
> + -- Dominic Hargreaves <dom@earth.li> Fri, 16 Nov 2018 12:46:23 +0000
> +
> libapache2-mod-perl2 (2.0.10-2) unstable; urgency=medium
>
> * Patch the test suite for Apache 2.4.24 compatibility.
With s/UNRELEASED/stretch/, and assuming this has been tested in
stretch, go ahead.
Cheers,
Julien
Reply to: