Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 29 Mar 2016 13:54:56 +0200
Source: libxstream-java
Binary: libxstream-java
Architecture: source all
Version: 1.4.7-2+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebo...@apache.org>
Description:
libxstream-java - Java library to serialize objects to XML and back again
Closes: 819455
Changes:
libxstream-java (1.4.7-2+deb8u1) jessie-security; urgency=high
.
* Security update:
- CVE-2016-3674: XML external entity injection vulnerability
(Closes: #819455)
Checksums-Sha1:
5a93893cb2a175bfce119f059c893b648b0c6019 2377
libxstream-java_1.4.7-2+deb8u1.dsc
329882aa8cb64b0ec729d840453a27608f59aba1 397328
libxstream-java_1.4.7.orig.tar.xz
d5f8e830ee60b90fa4900096cae0f69e9d34d6f7 7836
libxstream-java_1.4.7-2+deb8u1.debian.tar.xz
dabe24c33da8db1a1eb110515cb14ed3f34296c9 585112
libxstream-java_1.4.7-2+deb8u1_all.deb
Checksums-Sha256:
6a35595e495c47f738fd10834103fa4b525f00fd1962e12d712ee7a3c1026736 2377
libxstream-java_1.4.7-2+deb8u1.dsc
33aeb2217d2dd3734abcd6cc6f3d3283fed2646e4cbc79102d5237a099738eed 397328
libxstream-java_1.4.7.orig.tar.xz
ef33fb79e93db34ad40bf36f2f9a726a3f8d13526931a4d04aeb29823ed6ac37 7836
libxstream-java_1.4.7-2+deb8u1.debian.tar.xz
a63cc73bfa1b4c59cd6c9c1e348824b1e9fa02526a5567e5c002a8d470ca3a2c 585112
libxstream-java_1.4.7-2+deb8u1_all.deb
Files:
c434ad8c4c6d3f14220bbf465d5d8c13 2377 java optional
libxstream-java_1.4.7-2+deb8u1.dsc
09de7d2175bdc6c002aa681e3004d8d6 397328 java optional
libxstream-java_1.4.7.orig.tar.xz
534c37232051a0be1f9f3125e71b710f 7836 java optional
libxstream-java_1.4.7-2+deb8u1.debian.tar.xz
cacd5dcb651a09a40f931325bd88c60d 585112 java optional
libxstream-java_1.4.7-2+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Fi2m
-----END PGP SIGNATURE-----
Thank you for your contribution to Debian.
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
