Le 02/02/2015 23:55, Christopher Currie a écrit : > Greetings, debian-java. Is this the correct place to ask for help with > Ubuntu packages? Hi Christopher, Most Java packages are shared between Debian and Ubuntu, so we should be able to help. CVE-2013-0253 was fixed 2 years ago in libwagon2-java/2.2-3+nmu1 for Debian. I see trusty has the version 2.5-1, so you are safe. Emmanuel Bourg