Your message dated Sat, 31 May 2014 04:18:57 +0000
with message-id <e1wqakz-0003ru...@franck.debian.org>
and subject line Bug#745897: fixed in libstruts1.2-java 1.2.9-9
has caused the Debian Bug report #745897,
regarding libstruts1.2-java: CVE-2014-0114
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
745897: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=745897
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libstruts1.2-java
Version: 1.2.9-8
Severity: grave
Tags: security

Dear Maintainer,

In https://security-tracker.debian.org/tracker/CVE-2014-0094 :

>Notes
>- libstruts1.2-java <not-affected> (Affects Struts 2.0.0 - Struts 2.3.16)

But CVE-2014-0094 is known to affect Struts 1.x.


Regards,
Nobuhiro

--- End Message ---
--- Begin Message ---
Source: libstruts1.2-java
Source-Version: 1.2.9-9

We believe that the bug you reported is fixed in the latest version of
libstruts1.2-java, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 745...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hideki Yamane <henr...@debian.org> (supplier of updated libstruts1.2-java 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 31 May 2014 12:28:56 +0900
Source: libstruts1.2-java
Binary: libstruts1.2-java
Architecture: source all
Version: 1.2.9-9
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers 
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Hideki Yamane <henr...@debian.org>
Description: 
 libstruts1.2-java - Java Framework for MVC web applications
Closes: 745897
Changes: 
 libstruts1.2-java (1.2.9-9) unstable; urgency=high
 .
   * Team upload.
   * debian/patches
     - add struts-1.2.9-CVE-2014-0114.patch from Red Hat to fix CVE-2014-0114
       (Closes: #745897)
Checksums-Sha1: 
 290fd8596b4efd53158530670a8ce934580895ec 2325 libstruts1.2-java_1.2.9-9.dsc
 56f193f9e3af27ee3334033da349a2e713fd3702 8236 
libstruts1.2-java_1.2.9-9.debian.tar.xz
 2a0adc7f7a2ea2f8082a077d004c41dfd5ff5eb1 621192 
libstruts1.2-java_1.2.9-9_all.deb
Checksums-Sha256: 
 2640dd0d667e7879174bbe95f088ad69997bde0a2d91de78f1e2b5a1a31e0cff 2325 
libstruts1.2-java_1.2.9-9.dsc
 8267115ffe92b225fd48000fefaab4b440fcd356085b3d5447f3fe4860335911 8236 
libstruts1.2-java_1.2.9-9.debian.tar.xz
 31520ac13076c91befbfe32da03f1655f426dc0e337a5cbd93b3de58384bdea2 621192 
libstruts1.2-java_1.2.9-9_all.deb
Files: 
 6323eccadeae834b464a27e7d44f156d 621192 java optional 
libstruts1.2-java_1.2.9-9_all.deb
 cbccb4d85125c9996980de6c3f0f0047 2325 java optional 
libstruts1.2-java_1.2.9-9.dsc
 5433eaa3d10113262fef9e3b4f1d821e 8236 java optional 
libstruts1.2-java_1.2.9-9.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Y23l
-----END PGP SIGNATURE-----

--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to