On Tue, Aug 23, 2011 at 08:12:51PM -0430, Miguel Landaeta wrote: > On Mon, Jul 25, 2011 at 02:05:01PM +0200, Moritz Mühlenhoff wrote: > > What's the result? > > > > Upstream is totally unresponsive about this issue. > > I have reviewed changelog of subsequent releases and this doesn't > seem to be fixed. > > I have lost almost all motivation to try to fix this, but I'll > give another try to check again with upstream to see what they > have to say.
This reminded me of http://pwnies.com/archive/2010/winners/: -------------- Pwnie for Best Server-Side Bug (..) Credit: Meder Kydyraliev (..) Meder gets bonus points for having to track down developers on IRC to get the vulnerability fixed after receiving no response from secur...@struts.apache.org. -------------- Maybe you should try IRC as well... Cheers, Moritz __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.