Re: libspring-java support

2022-04-02 Thread Holger Levsen
Hi Sylvain, On Fri, Apr 01, 2022 at 12:06:40PM +0200, Sylvain Beucler wrote: > Holger, can you clarify if you want the LTS team to handle > debian-security-support backports to stretch, or if you intend to do it > yourself? thanks for asking, I'd be glad for more people maintaining debian-securi

Re: libspring-java support

2022-04-01 Thread Sylvain Beucler
Hi, On 01/04/2022 11:50, Emilio Pozuelo Monfort wrote: On 03/12/2021 23:50, Markus Koschany wrote: Am Freitag, dem 03.12.2021 um 14:28 +0100 schrieb Sylvain Beucler: This year I worked on libspring-java twice for LTS&ELTS. In both case upstream provided limited information for the CVEs, and fo

Re: libspring-java support

2022-04-01 Thread Emilio Pozuelo Monfort
Hi, On 03/12/2021 23:50, Markus Koschany wrote: Hi Sylvain, Am Freitag, dem 03.12.2021 um 14:28 +0100 schrieb Sylvain Beucler: Hi, This year I worked on libspring-java twice for LTS&ELTS. In both case upstream provided limited information for the CVEs, and for 5 of them we're unable to determ

Re: libspring-java support

2021-12-03 Thread Markus Koschany
Hi Sylvain, Am Freitag, dem 03.12.2021 um 14:28 +0100 schrieb Sylvain Beucler: > Hi, > > This year I worked on libspring-java twice for LTS&ELTS. In both case > upstream provided limited information for the CVEs, and for 5 of them > we're unable to determine the fixes. > https://deb.freexian.co