Bug#988208: CVE-2021-32062

[Sebastiaan Couwenberg]

Control: block -1 by 988224 988225

On 5/8/21 6:41 AM, Sebastiaan Couwenberg wrote:
> On 5/7/21 9:14 PM, Moritz Muehlenhoff wrote:
>> Patch for branch-7-6:
>> https://github.com/mapserver/mapserver/commit/927ac97cb9ece305306b5ab2b5600d3afe8c1732 
> 
> That does not apply cleanly on 7.6.2 in bullseye, due to the changes in:
> 
>  https://github.com/MapServer/MapServer/commit/b128dace3ec3e61bf063f7285d1279e9f9fd9e28
> 
> We'll need to include both in the update for bullseye, or hack the patch
> to make it apply without those changes which I'm not very confident in.
> 
> I'm not sure if the release team will accept the additional changes
> though, for both the bullseye unblock and buster pu.

The unblock for bullseye is requested in #988224 with both upstream
commits as patches.

The same changes have been applied for 7.2 in buster, pu #988225.

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1