Path: csiph.com!news.mixmin.net!weretis.net!feeder4.news.weretis.net!newsfeed.CARNet.hr!news.spin.it!bofh.it!news.nic.it!robomod From: =?UTF-8?Q?Moritz_M=C3=BChlenhoff?= Newsgroups: linux.debian.maint.java Subject: Re: ActiveMQ security update Date: Fri, 18 Mar 2016 22:10:02 +0100 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Fri Mar 18 21:09:55 2016 Old-Return-Path: X-Amavis-Spam-Status: No, score=-9.281 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate:hard: -6.1 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.24 (2015-08-30) X-Sa-Exim-Connect-IP: 95.33.113.134 X-Sa-Exim-Mail-From: jmm@inutil.org X-Sa-Exim-Scanned: No (on inutil.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/19266 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20160318210935.GA19863@pisco.westfalen.local Approved: robomod@news.nic.it Lines: 17 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: "team@security.debian.org" , "debian-java@lists.debian.org" X-Original-Date: Fri, 18 Mar 2016 22:09:35 +0100 X-Original-Message-ID: <20160318210935.GA19863@pisco.westfalen.local> X-Original-References: <56E9C9EB.4080503@debian.org> <56EC1071.8060102@debian.org> Xref: csiph.com linux.debian.maint.java:8940 On Fri, Mar 18, 2016 at 03:28:01PM +0100, Markus Koschany wrote: > Please find attached the debdiff for Wheezy. I have tried to backport > libxstream-java from Jessie to Wheezy but I don't think this is the best > solution anymore. We would need to backport libjdom2-java as well and > change the build-dependency of libcglib3-java to libcglib-java again. > This is potentially dangerous for the reverse-dependencies and would > require more work and testing. > > I have included the required classes in my patch now. They were directly > taken from Jessie's libxstream-java package. Otherwise the patch is > identical to the one I already sent to you. I think this is a better > solution and I hope you agree. Thanks, please upload both to security-master. Cheers, Moritz