libspring-2.5-java_2.5.6.SEC02-2+squeeze1_amd64.changes ACCEPTED into proposed-updates
Debian FTP Masters
ftpmaster at ftp-master.debian.org
Sat Jun 30 09:48:00 UTC 2012
Warnings:
Could not copy libspring-2.5-java_2.5.6.SEC02.orig.tar.gz to holding; will attempt to find in DB later
ignoring libspring-2.5-java_2.5.6.SEC02.orig.tar.gz, since it's already in the archive.
Notes:
Mapping stable-security to proposed-updates.
Accepted:
libspring-2.5-java_2.5.6.SEC02-2+squeeze1.debian.tar.gz
to main/libs/libspring-2.5-java/libspring-2.5-java_2.5.6.SEC02-2+squeeze1.debian.tar.gz
libspring-2.5-java_2.5.6.SEC02-2+squeeze1.dsc
to main/libs/libspring-2.5-java/libspring-2.5-java_2.5.6.SEC02-2+squeeze1.dsc
libspring-aop-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-aop-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-aspects-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-aspects-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-beans-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-beans-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-context-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-context-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-context-support-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-context-support-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-core-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-core-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-jdbc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-jdbc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-jms-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-jms-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-orm-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-orm-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-test-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-test-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-tx-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-tx-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-web-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-web-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-webmvc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-webmvc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-webmvc-portlet-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-webmvc-portlet-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
libspring-webmvc-struts-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
to main/libs/libspring-2.5-java/libspring-webmvc-struts-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb
Changes:
libspring-2.5-java (2.5.6.SEC02-2+squeeze1) stable-security; urgency=high
.
* Backport fix for CVE-2011-2730: Spring Framework information disclosure
from 2.5.6.SEC03 on upstream maintainance repository (Closes: #677814):
- d/patches/CVE-2011-2730.diff: A new context parameter has been added
called springJspExpressionSupport. When true (the default) the existing
behaviour of evaluating EL within the tag will be performed. When running
in an environment where EL support is provided by the container, it is
strongly recommended that this is set to false
Override entries for your package:
libspring-2.5-java_2.5.6.SEC02-2+squeeze1.dsc - source java
libspring-aop-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-aspects-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-beans-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-context-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-context-support-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-core-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-jdbc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-jms-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-orm-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-test-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-tx-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-web-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-webmvc-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-webmvc-portlet-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
libspring-webmvc-struts-2.5-java_2.5.6.SEC02-2+squeeze1_all.deb - extra java
Announcing to debian-changes at lists.debian.org
Closing bugs: 677814
Thank you for your contribution to Debian.
More information about the pkg-java-maintainers
mailing list