Your message dated Tue, 01 Apr 2014 21:17:12 +0000
with message-id <e1wv63u-0003iz...@franck.debian.org>
and subject line Bug#741604: fixed in libspring-java 3.0.6.RELEASE-6+deb7u3
has caused the Debian Bug report #741604,
regarding libspring-java: Multiple security issues
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
741604: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741604
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libspring-java
Severity: grave
Tags: security
Justification: user security hole

http://www.gopivotal.com/security/cve-2014-0054
http://www.gopivotal.com/security/cve-2014-1904

I'm not sure whether these are worth a DSA?

Cheers,
        Moritz

--- End Message ---
--- Begin Message ---
Source: libspring-java
Source-Version: 3.0.6.RELEASE-6+deb7u3

We believe that the bug you reported is fixed in the latest version of
libspring-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 741...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Miguel Landaeta <nomad...@debian.org> (supplier of updated libspring-java 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 24 Mar 2014 18:12:13 -0300
Source: libspring-java
Binary: libspring-core-java libspring-beans-java libspring-aop-java 
libspring-context-java libspring-context-support-java libspring-web-java 
libspring-web-servlet-java libspring-web-struts-java libspring-web-portlet-java 
libspring-test-java libspring-transaction-java libspring-jdbc-java 
libspring-jms-java libspring-orm-java libspring-expression-java 
libspring-oxm-java libspring-instrument-java
Architecture: source all
Version: 3.0.6.RELEASE-6+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Miguel Landaeta <nomad...@debian.org>
Description: 
 libspring-aop-java - modular Java/J2EE application framework - AOP
 libspring-beans-java - modular Java/J2EE application framework - Beans
 libspring-context-java - modular Java/J2EE application framework - Context
 libspring-context-support-java - modular Java/J2EE application framework - 
Context Support
 libspring-core-java - modular Java/J2EE application framework - Core
 libspring-expression-java - modular Java/J2EE application framework - 
Expression language
 libspring-instrument-java - modular Java/J2EE application framework - 
Instrumentation
 libspring-jdbc-java - modular Java/J2EE application framework - JDBC tools
 libspring-jms-java - modular Java/J2EE application framework - JMS tools
 libspring-orm-java - modular Java/J2EE application framework - ORM tools
 libspring-oxm-java - modular Java/J2EE application framework - Object/XML 
Mapping
 libspring-test-java - modular Java/J2EE application framework - Test helpers
 libspring-transaction-java - modular Java/J2EE application framework - 
transaction
 libspring-web-java - modular Java/J2EE application framework - Web
 libspring-web-portlet-java - modular Java/J2EE application framework - Portlet 
MVC
 libspring-web-servlet-java - modular Java/J2EE application framework - Web 
Portlet
 libspring-web-struts-java - modular Java/J2EE application framework - Struts 
MVC
Closes: 741604
Changes: 
 libspring-java (3.0.6.RELEASE-6+deb7u3) wheezy-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2013-6429 and CVE-2013-6430. (Closes: #741604).
Checksums-Sha1: 
 e2380a5effbe04a083e44e27a6cd67660ba42d70 4567 
libspring-java_3.0.6.RELEASE-6+deb7u3.dsc
 7f870e3b6e6185eb0f48ac9ee6ba19012b227a06 29989 
libspring-java_3.0.6.RELEASE-6+deb7u3.debian.tar.gz
 f8df87ab411e2b4718829da170e776f11e084dc5 366958 
libspring-core-java_3.0.6.RELEASE-6+deb7u3_all.deb
 a97795cf1610bd3e61103d241e1776407c37f5ec 520342 
libspring-beans-java_3.0.6.RELEASE-6+deb7u3_all.deb
 200e22fb5ea07e4f491833ca9f95b859e0a990e8 331438 
libspring-aop-java_3.0.6.RELEASE-6+deb7u3_all.deb
 4c921b70b46226d87ff5aa163931b6352ff8e103 599684 
libspring-context-java_3.0.6.RELEASE-6+deb7u3_all.deb
 660fcd5d722763520f2f1acf278f01a4a8342531 113860 
libspring-context-support-java_3.0.6.RELEASE-6+deb7u3_all.deb
 95be66d469acbf0f530ae90344c98ba61ec94bf2 374674 
libspring-web-java_3.0.6.RELEASE-6+deb7u3_all.deb
 582a50dfdc07417ab74648c357dbe987791c2b4f 399500 
libspring-web-servlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 f213aa113b74acb15cfd38520660cf1ae0325566 51806 
libspring-web-struts-java_3.0.6.RELEASE-6+deb7u3_all.deb
 2d08d13daecbca05881c9cdb3d03b34d2c2d63c7 180504 
libspring-web-portlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 5bddd8b58d208c1129e9d58697145cbf21f06be4 205318 
libspring-test-java_3.0.6.RELEASE-6+deb7u3_all.deb
 306861b169f068cb1f1dbbec8fd06bd12a385595 214484 
libspring-transaction-java_3.0.6.RELEASE-6+deb7u3_all.deb
 88c2506cd46a5c5dfc64a3b356e9231477f76816 359098 
libspring-jdbc-java_3.0.6.RELEASE-6+deb7u3_all.deb
 66ae00ab460b8a8335db3ee44578ccf3c6a91738 187094 
libspring-jms-java_3.0.6.RELEASE-6+deb7u3_all.deb
 bb82bde667dc29e7148007e8d719b0667964c34a 318082 
libspring-orm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 d3101e74ee5102e436aa10ccec387df601f5869d 176860 
libspring-expression-java_3.0.6.RELEASE-6+deb7u3_all.deb
 c2d5a3f4cb5447fe668910bd0a03922f2006c0eb 79020 
libspring-oxm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 545ba64cb3d8bd39cec0607d3816301fff6881b7 30250 
libspring-instrument-java_3.0.6.RELEASE-6+deb7u3_all.deb
Checksums-Sha256: 
 f50faeaf12d401e7f7d50471fb9aa454125db4d801769980aa731a600ec3196d 4567 
libspring-java_3.0.6.RELEASE-6+deb7u3.dsc
 3f8d417d8b1ff5bd9bd7c123e91d99c1b9df09f97fdf85d3f8912c59670cde9f 29989 
libspring-java_3.0.6.RELEASE-6+deb7u3.debian.tar.gz
 f7ffd7bf84501b120f88e1af246e1fb30521c4c0df2b08816784a4a0306d5faf 366958 
libspring-core-java_3.0.6.RELEASE-6+deb7u3_all.deb
 34d3351b476cdf5b7caa34bf20b2f75cd9354bd15b3d7bda46605fc0899506ac 520342 
libspring-beans-java_3.0.6.RELEASE-6+deb7u3_all.deb
 9db671e989ffe7bd118ed5d9bc7870f3578ce68fbc8fc1c3c0a3ee03d2f2c423 331438 
libspring-aop-java_3.0.6.RELEASE-6+deb7u3_all.deb
 7640c9843b8f90349018c4d33f5430dd0c736177e2eb00382793384dea71c098 599684 
libspring-context-java_3.0.6.RELEASE-6+deb7u3_all.deb
 3d56a527b965d8c163e27375f97f1fda8789ae2ab76f3f70e710ba86fc9cad12 113860 
libspring-context-support-java_3.0.6.RELEASE-6+deb7u3_all.deb
 6e00cb8e01d198210b72ee6fbd49b530a610ffd6180c31b7cc05c7042145c2d5 374674 
libspring-web-java_3.0.6.RELEASE-6+deb7u3_all.deb
 d33f973adfa72107b82c0eba600460d4b9aea3d0c5174325c2e15caded48f55b 399500 
libspring-web-servlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 1d5a3f62c3eae1f1a7e86b51c7f180439cb88a8905ddf1238cb6236ce8f8a2c3 51806 
libspring-web-struts-java_3.0.6.RELEASE-6+deb7u3_all.deb
 18b3c4315afa969d94bb20a96218a026e49f9868db1527db179322ad6e163d15 180504 
libspring-web-portlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 27063f0101fd6b0ee268af66aeb592e15b6d1ce5dddc13e28a1bd91260ef0e2a 205318 
libspring-test-java_3.0.6.RELEASE-6+deb7u3_all.deb
 88e4639e2d59ffe89cc3f81928fd9ab0f212741a60db659aceb5af29b399790d 214484 
libspring-transaction-java_3.0.6.RELEASE-6+deb7u3_all.deb
 bf1500c87fbc2f3586a51e9831a532ca7078e24efb1a30360e49234b5c896b68 359098 
libspring-jdbc-java_3.0.6.RELEASE-6+deb7u3_all.deb
 61f7dee47728f70a40ad4afdd4906309ccab453a6ab2da41bf2136c921d2ab75 187094 
libspring-jms-java_3.0.6.RELEASE-6+deb7u3_all.deb
 6b3984f6d7f81c4db59dd2a315ad1968ad5e87ccb30c56f07337f508809be7e1 318082 
libspring-orm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 5dc6b964e59cb42fab9862d7f453f7024124629680361008b6417ee1aa6e14a7 176860 
libspring-expression-java_3.0.6.RELEASE-6+deb7u3_all.deb
 04bfb5f55b655b90137504a22ff517106c91dbb7607a37a04a055a0d7a25edde 79020 
libspring-oxm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 30980b509e89c6ade4915eb9dcb8fe0ac030097e0a53c8868204ac9fc4d23484 30250 
libspring-instrument-java_3.0.6.RELEASE-6+deb7u3_all.deb
Files: 
 9a7b46425c7497c47e7de3a80bfb5a00 4567 java extra 
libspring-java_3.0.6.RELEASE-6+deb7u3.dsc
 9587b4b88292e9987359c0055024a83a 29989 java extra 
libspring-java_3.0.6.RELEASE-6+deb7u3.debian.tar.gz
 3aec5115dc66b1100e7c22f5461e0d65 366958 java extra 
libspring-core-java_3.0.6.RELEASE-6+deb7u3_all.deb
 7f2a565176394c7a3b40f0793097250c 520342 java extra 
libspring-beans-java_3.0.6.RELEASE-6+deb7u3_all.deb
 1e45312e5590d58e3859de0bbb685b6b 331438 java extra 
libspring-aop-java_3.0.6.RELEASE-6+deb7u3_all.deb
 7744dfb2818b305b53306f36ca7a93b3 599684 java extra 
libspring-context-java_3.0.6.RELEASE-6+deb7u3_all.deb
 133143a2d56e6deb52c22679f3a0baba 113860 java extra 
libspring-context-support-java_3.0.6.RELEASE-6+deb7u3_all.deb
 0625de71320fdf79b35f732ff2e0890c 374674 java extra 
libspring-web-java_3.0.6.RELEASE-6+deb7u3_all.deb
 0f5a809177cb8043d08edc2263bf2405 399500 java extra 
libspring-web-servlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 1117f6d03d0c6e3b08236d7ea144227c 51806 java extra 
libspring-web-struts-java_3.0.6.RELEASE-6+deb7u3_all.deb
 f208796577028eab7b24eb496e1c0e96 180504 java extra 
libspring-web-portlet-java_3.0.6.RELEASE-6+deb7u3_all.deb
 d42fc8e8e08ddd4b5c8f032f80378ae2 205318 java extra 
libspring-test-java_3.0.6.RELEASE-6+deb7u3_all.deb
 eb6198c9363be6a5d61325abb6021691 214484 java extra 
libspring-transaction-java_3.0.6.RELEASE-6+deb7u3_all.deb
 937bd995624c105636a5d0ad6c01019f 359098 java extra 
libspring-jdbc-java_3.0.6.RELEASE-6+deb7u3_all.deb
 9503b6e03deea211e2eab9db2a5bb6de 187094 java extra 
libspring-jms-java_3.0.6.RELEASE-6+deb7u3_all.deb
 c968814566e26657d134271d7e879acb 318082 java extra 
libspring-orm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 6ac983bf4f4fc0a3fa9700cd9f0ea626 176860 java extra 
libspring-expression-java_3.0.6.RELEASE-6+deb7u3_all.deb
 22f3bc10a56e5e6cf831653d79334cb7 79020 java extra 
libspring-oxm-java_3.0.6.RELEASE-6+deb7u3_all.deb
 70b5447965d3d8a37a85e1bc8febc86a 30250 java extra 
libspring-instrument-java_3.0.6.RELEASE-6+deb7u3_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=ROf5
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to