Re: ruby-loofah 2.0.3-2 (stretch) update (CVE-2018-8048)

2018-03-25 Thread Georg Faerber
Hi security team, On 18-03-22 17:23:48, Moritz Muehlenhoff wrote: > On Thu, Mar 22, 2018 at 05:21:15PM +0100, Georg Faerber wrote: > > I would like to fix CVE-2018-8048, which is currently present in > > ruby-loofah 2.0.3-2 in stretch. Do you prefer an "straight" upload > > done by you, or should

Re: ruby-loofah 2.0.3-2 (stretch) update (CVE-2018-8048)

2018-03-25 Thread Cédric Boutillier
Hi! On Sat, Mar 24, 2018 at 04:41:17PM +0100, Georg Faerber wrote: > Some notes (doing this for the first time..): > > - AFAIK, the delta should be kept as small as possible, that's why I > didn't added a description for the patch. It is better to add DEP-3 header anyway. The size of the