Bug#745897: closed by Hideki Yamane <henrich at debian.org> (Bug#745897: fixed in libstruts1.2-java 1.2.9-9)

[Nobuhiro Ban]

Hi all,

2014-06-16 20:27 GMT+09:00 Emmanuel Bourg <ebourg at apache.org>:
>I got confirmation from the Struts developers that a new release using
>commons-beanutils 1.9.2 is planned soon. So I'm going to prepare the
>backport of commons-beanutils 1.9.2 in stable and wait for the new
>release of Struts 1.x.

Security fix was committed over 1 month ago [1],
but not released (from upstream) yet.

So, I made a Debian fix using [1].


[1] http://svn.apache.org/r1603883


Regards,
Nobuhiro
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 745897.tar.gz
Type: application/x-gzip
Size: 1715 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20140722/6cac9296/attachment.bin>