Mapping stable-security to proposed-updates. Accepted:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 29 Mar 2016 13:54:56 +0200 Source: libxstream-java Binary: libxstream-java Architecture: source all Version: 1.4.7-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebo...@apache.org> Description: libxstream-java - Java library to serialize objects to XML and back again Closes: 819455 Changes: libxstream-java (1.4.7-2+deb8u1) jessie-security; urgency=high . * Security update: - CVE-2016-3674: XML external entity injection vulnerability (Closes: #819455) Checksums-Sha1: 5a93893cb2a175bfce119f059c893b648b0c6019 2377 libxstream-java_1.4.7-2+deb8u1.dsc 329882aa8cb64b0ec729d840453a27608f59aba1 397328 libxstream-java_1.4.7.orig.tar.xz d5f8e830ee60b90fa4900096cae0f69e9d34d6f7 7836 libxstream-java_1.4.7-2+deb8u1.debian.tar.xz dabe24c33da8db1a1eb110515cb14ed3f34296c9 585112 libxstream-java_1.4.7-2+deb8u1_all.deb Checksums-Sha256: 6a35595e495c47f738fd10834103fa4b525f00fd1962e12d712ee7a3c1026736 2377 libxstream-java_1.4.7-2+deb8u1.dsc 33aeb2217d2dd3734abcd6cc6f3d3283fed2646e4cbc79102d5237a099738eed 397328 libxstream-java_1.4.7.orig.tar.xz ef33fb79e93db34ad40bf36f2f9a726a3f8d13526931a4d04aeb29823ed6ac37 7836 libxstream-java_1.4.7-2+deb8u1.debian.tar.xz a63cc73bfa1b4c59cd6c9c1e348824b1e9fa02526a5567e5c002a8d470ca3a2c 585112 libxstream-java_1.4.7-2+deb8u1_all.deb Files: c434ad8c4c6d3f14220bbf465d5d8c13 2377 java optional libxstream-java_1.4.7-2+deb8u1.dsc 09de7d2175bdc6c002aa681e3004d8d6 397328 java optional libxstream-java_1.4.7.orig.tar.xz 534c37232051a0be1f9f3125e71b710f 7836 java optional libxstream-java_1.4.7-2+deb8u1.debian.tar.xz cacd5dcb651a09a40f931325bd88c60d 585112 java optional libxstream-java_1.4.7-2+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJXHe9mAAoJEPUTxBnkudCsRZEP/0wf4pIhbIHx1tOaiOU6+hHf 8CsjHZTj/v74ftSNBCrX4/72NpHomFMS6LtzykaUFtC8PQnL4tBza+KNbX98iVjP /cbpAIJdlQ7qvWVdXablZqyVSNbJI6w8KQzl8RHOjWolDR9I54SQGKEJQOqh4nsv 3D7UA++wncnukLWGTWSbNzPYTZFE71n9/UkJ4gGskO4G8KPyy118EYyfQG9SOAWJ msYkzr5CWfDpjufi+JgqLXtQZr+9gOZ4oPNJxKRwnOv7RfWTP5q4AQS/gzPxFuXg G1FVUn+7jXLm6o5GTy3DREbIaO/WgtZOKnpQzaMM+HAnGCBom7jV/R0hNsJYwhEj f6GiCAdwsvpnzGIdcQBAKn/BwbWob+2ZlmI1jLyC1swsAlxeRSVNvhL8C28dcyvK rArEpoltBk11wOK/hgNsdVdnBqt+bPPs5P/Rw9C1XHexSSGkdCH0L9gcGB13QHH0 sN6LRApDo5FIrcWdEnt+jsnblTm08gxMNd1Kzr8bzzuR8J7cDYfp2cp4vWuVZczv jNTSSMcZEnRf9acgpqiA5U1GeqgQotEEj7ObvpVHdRQ3A9w/+FlMmcHX+a1t3Ier DcBH6Nmgznf0wA4M7sb9cHAds7KsSjTPoigmOyKd2TiksZ4+VEduDxLUPX29Yq/I 2nDncEKfCqHGMdILgNqO =Fi2m -----END PGP SIGNATURE----- Thank you for your contribution to Debian. __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.