Bug#717031: libjgroups-java: CVE-2013-4112

Package: libjgroups-java Severity: grave Tags: security Justification: user security hole Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4112 __ This is the maintainer address of Debian's Java team http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.

Bug#717031: libjgroups-java: CVE-2013-4112

Debian has JGroups 2.12, this version doesn't use authentication. An attacker can disrupt a node (stopping or slowing it down) but not execute arbitrary code. Diagnostics are enabled by default. We can simply disable them by default. Emmanuel Bourg __ This is the maintainer address of Debian's