Bug#927422: stretch-pu: package jquery/3.1.1-2+deb9u1
Control: tags -1 + confirmed
On Sat, 2019-04-20 at 08:10 +0200, Salvatore Bonaccorso wrote:
> Hi,
>
> On Fri, Apr 19, 2019 at 03:01:16PM +0200, Xavier Guimard wrote:
> > I fixed https://snyk.io/vuln/SNYK-JS-JQUERY-174006 vulnerability
> > for
> > Buster. Here is the fix for Stretch. It just avoid Object.prototype
> > pollution without chnaging behavior. Could you insert it in next
> > stretch
> > update ?
>
> CVE-2019-11358 was assigned for the respective issue.
Please add that to the changelog and go ahead with the upload, bearing
in mind that the window for 9.9 closes during this weekend.
Regards,
Adam
Reply to: