[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: squeeze update of libspring-2.5-java?

Hello Emmanuel,

On Tue, 24 Feb 2015, Emmanuel Bourg wrote:
> CVE-2011-3923 seems to be a Struts vulnerability, why is it assigned to
> Spring?

I asked Salvatore Bonaccorso <carnil@debian.org> to review this since
he confirmed that assignation a while ago... he double checked and
it was a mistake (the CVE assignation has been fixed now).

Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/

Reply to: