As discussed on irc, the package has no patch system, so they're not
being applied at build time. Could you please submit a new debdiff with
the patches applied inline? Thanks.

Also, the CVE-2013-1915 patch causes the package to FTBFS, so it's going
to need some fixing.

Thanks!

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-1915

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1169030

Title:
  CVE 2013-1915: local files disclosure or resource exhaustion via XML
  External Entity attack

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libapache-mod-security/+bug/1169030/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to