Bug#779621: jakarta-taglibs-standard: CVE-2015-0254

[Miguel Landaeta]

On Sat, Mar 14, 2015 at 06:21:37PM +0100, Emmanuel Bourg wrote:
> Thank you for taking care of this Miguel. Upstream told me that the
> commits r1642442 [1] and r1642613 [2] contained the relevant fixes for
> this issue. I haven't checked if they can be easily backported though.
> 
> Emmanuel Bourg
> 
> [1] http://svn.apache.org/r1642442
> [2] http://svn.apache.org/r1642613

Excellent Emmanuel, thanks for contacting upstream about this.

That should ease the backporting significantly.

-- 
Miguel Landaeta, nomadium at debian.org
secure email with PGP 0x6E608B637D8967E9 available at http://miguel.cc/key.
"Faith means not wanting to know what is true." -- Nietzsche
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20150314/f4e730ba/attachment.sig>