Hi Jonas, On Sun, Apr 30, 2017 at 12:40:27AM +0200, Jonas Smedegaard wrote: > Package: radicale > Version: 2.0.0~rc1-1
Quickly checked and at least the version in stretch is affected as well (not done triage on older versions yet). There is a fix for the 1.1.x branch at: https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b FTR, I have requested a CVE for this issue via https://cveform.mitre.org Regards, Salvatore