Re: packaging java applications: questions from a newbie

2015-05-25 Thread Guillaume Turri
Hi, Le 26 mai 2015 00:43, "Markus Koschany" a écrit : > [...] > Hope that helps a little > Thank you for all those pointers! I'm going to spend some time reading them and experimenting again! Regards, Guillaume -- To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org with a subject o

Re: packaging java applications: questions from a newbie

2015-05-25 Thread Markus Koschany
Hello Guillaume, [ I assume you are not subscribed to debian-java, hence I will CC you ] On 24.05.2015 22:31, Guillaume Turri wrote: > Hi, > > Context > === > > There's a Java application I've been working on during the last few > years [1], and I'd like to package it. (It also uses two dep

Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Salvatore Bonaccorso
Hi Markus, On Mon, May 25, 2015 at 05:10:48PM +0200, Markus Koschany wrote: > Hello Salvatore, > > On 25.05.2015 09:21, Salvatore Bonaccorso wrote: > [...] > >> I think the issue warrants a DSA since it is remotely exploitable > >> although the severity and impact are probably only moderate for m

Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Markus Koschany
Hello Salvatore, On 25.05.2015 09:21, Salvatore Bonaccorso wrote: [...] >> I think the issue warrants a DSA since it is remotely exploitable >> although the severity and impact are probably only moderate for most setups. > > Sourcewise the debdiffs looks good to me. But no I'm not really > famila

Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Salvatore Bonaccorso
Hello Markus, On Mon, May 25, 2015 at 12:35:04AM +0200, Markus Koschany wrote: > Hello security team, > > I have prepared two security updates for libapache-mod-jk which is > affected by CVE-2014-8111 [1] in Jessie and Wheezy. This is Debian bug > #783233 [2]. Thanks for preparing the update. >