Bug#988208: CVE-2021-32062

[Sebastiaan Couwenberg]

On 5/7/21 9:14 PM, Moritz Muehlenhoff wrote:
> Patch for branch-7-6:
> https://github.com/mapserver/mapserver/commit/927ac97cb9ece305306b5ab2b5600d3afe8c1732 

That does not apply cleanly on 7.6.2 in bullseye, due to the changes in:

 https://github.com/MapServer/MapServer/commit/b128dace3ec3e61bf063f7285d1279e9f9fd9e28

We'll need to include both in the update for bullseye, or hack the patch
to make it apply without those changes which I'm not very confident in.

I'm not sure if the release team will accept the additional changes
though, for both the bullseye unblock and buster pu.

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1