Bug#793770: Cookie parsing bug may lead to 'HttpOnly' cookie bypass (CVE-2015-2156)

[Emmanuel Bourg]

Le 9/01/2017 à 23:37, Moritz Muehlenhoff a écrit :

> This is unfixed with a patch for nearly 1.5 years, can we please get this
> fixed for the stretch release.

Hi Moritz,

Thank you for the reminder. The fix was backported in the version 3.9.7.
I'll update the package to the latest 3.9.x version.

Emmanuel Bourg