Source: libspring-java Version: 3.0.0 Severity: serious Tags: security Justification: must
According to https://github.com/spring-projects/spring-framework/commit/3f68cd versions affected include 3.0.0 to 3.2.11 The feature of '<mvc:resources/> ' seems to be introduced in 3.0.4 ( http://docs.spring.io/spring/d... ). Bastien __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.