Re: ActiveMQ security update

2016-03-19 Thread Moritz Mühlenhoff
On Fri, Mar 18, 2016 at 03:28:01PM +0100, Markus Koschany wrote: > Please find attached the debdiff for Wheezy. I have tried to backport > libxstream-java from Jessie to Wheezy but I don't think this is the best > solution anymore. We would need to backport libjdom2-java as well and > change the bu

ActiveMQ security update

2016-03-19 Thread Markus Koschany
Hello security team, I have prepared a security update for ActiveMQ regarding CVE-2015-5254. Please find attached the proposed debdiff for Jessie. Unfortunately this patch relies on classes in libxstream-java that are not present in Wheezy. We could backport the Jessie version of libxstream-java

Re: ActiveMQ security update

2016-03-19 Thread Markus Koschany
Please find attached the debdiff for Wheezy. I have tried to backport libxstream-java from Jessie to Wheezy but I don't think this is the best solution anymore. We would need to backport libjdom2-java as well and change the build-dependency of libcglib3-java to libcglib-java again. This is potentia

Re: ActiveMQ security update

2016-03-19 Thread Markus Koschany
Am 18.03.2016 um 22:09 schrieb Moritz Mühlenhoff: > On Fri, Mar 18, 2016 at 03:28:01PM +0100, Markus Koschany wrote: >> Please find attached the debdiff for Wheezy. I have tried to backport >> libxstream-java from Jessie to Wheezy but I don't think this is the best >> solution anymore. We would nee