Control: tag -1 confirmed On Fri, Nov 16, 2018 at 12:57:27PM +0000, Dominic Hargreaves wrote: > diff -Nru libapache2-mod-perl2-2.0.10/debian/changelog > libapache2-mod-perl2-2.0.10/debian/changelog > --- libapache2-mod-perl2-2.0.10/debian/changelog 2016-12-25 > 09:51:10.000000000 +0000 > +++ libapache2-mod-perl2-2.0.10/debian/changelog 2018-11-16 > 12:46:23.000000000 +0000 > @@ -1,3 +1,10 @@ > +libapache2-mod-perl2 (2.0.10-2+deb9u1) UNRELEASED; urgency=medium > + > + * [SECURITY] CVE-2011-2767: don't allow <Perl> sections in > + user controlled configuration (Closes: #644169) > + > + -- Dominic Hargreaves <d...@earth.li> Fri, 16 Nov 2018 12:46:23 +0000 > + > libapache2-mod-perl2 (2.0.10-2) unstable; urgency=medium > > * Patch the test suite for Apache 2.4.24 compatibility.
With s/UNRELEASED/stretch/, and assuming this has been tested in stretch, go ahead. Cheers, Julien
