Control: tags -1 + confirmed On Thu, 2015-11-05 at 15:50 +0100, Markus Koschany wrote: > the Debian Java Team would like to update commons-httpclient in Jessie > to fix CVE-2015-5262. We don't think that this issue warrants a DSA > from the security team but nevertheless it is important enough that it > should be fixed in an upcoming point release. Please go ahead. Regards, Adam