On 02/01/2014 08:39 AM, Debian testing watch wrote:
> FYI: The status of the libxml-security-java source package
> in Debian's testing distribution has changed.
> 
>   Previous version: 1.5.5-2
>   Current version:  (not in testing)
>   Hint: <http://release.debian.org/britney/hints/auto-removals>
>     Bug #733938: libxml-security-java: CVE-2013-4517
> 
> The script that generates this mail tries to extract removal
> reasons from comments in the britney hint files. Those comments
> were not originally meant to be machine readable, so if the
> reason for removing your package seems to be nonsense, it is
> probably the reporting script that got confused. Please check the
> actual hints file before you complain about meaningless removals.

1.5.6, which addresses the RC CVE, has been uploaded to unstable.
Still to do is to address the CVE in stable.
tony



Attachment: signature.asc
Description: OpenPGP digital signature

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to