Hi Markus, On Mittwoch, 18. Februar 2015, Markus Koschany wrote: > > I think this is a trivial update, the version of Axis hasn't changed > > since Squeeze and it should be as simple as dropping the CVE-2014-3596 > > patch from axis/1.4-22 into the version 1.4-12 currently in Squeeze (it > > also addresses CVE-2012-5784). > I agree with Emmanuel. I have successfully built axis in Squeeze with > the CVE patch. Please find attached the debdiff against the version in > Squeeze. Thanks! I've just uploaded a fixed axis package to squeeze-lts and will send out the announcement shortly! cheers, Holger
Attachment:
signature.asc
Description: This is a digitally signed message part.