Source: libspring-java
Version: 3.0.0
Severity: serious
Tags: security
Justification: must



According to https://github.com/spring-projects/spring-framework/commit/3f68cd 
versions affected include 3.0.0 to 3.2.11

The feature of '<mvc:resources/> ' seems to be introduced in 3.0.4 ( 
http://docs.spring.io/spring/d... ).

Bastien

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to