Le 17/12/2014 21:07, Jonathan Wiltshire a écrit : > Control: tag -1 moreinfo > > On Thu, Dec 04, 2014 at 01:15:48AM +0100, Emmanuel Bourg wrote: > > Those diffs are unreviewable. Can you cherry-pick the security fixes > instead? It should be possible to backport the fix, but this wouldn't help with the libspring-java issues since a more recent version of hibernate-validator is required.