-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 29 Apr 2020 01:19:02 +0530 Source: dom4j Binary: libdom4j-java libdom4j-java-doc Architecture: source all Version: 1.6.1+dfsg.3-2+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Description: libdom4j-java - flexible XML framework for Java libdom4j-java-doc - documentation for libdom4j-java Closes: 958055 Changes: dom4j (1.6.1+dfsg.3-2+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix prevent a XML external entity vulnerability in the SAX parser. (Fixes: CVE-2020-10683) (Closes: #958055) Checksums-Sha1: a803f405864fec15d08d44cc4e4139e6c6592076 2353 dom4j_1.6.1+dfsg.3-2+deb8u2.dsc 205345af66946df5a33048395aaf50efb93dd88a 2315230 dom4j_1.6.1+dfsg.3.orig.tar.gz 7bb411ca56de992c65627ae9cd0531f7f0584af1 13340 dom4j_1.6.1+dfsg.3-2+deb8u2.debian.tar.xz 76a621bb0ace061683097586e2cc6f749586fdb6 348384 libdom4j-java_1.6.1+dfsg.3-2+deb8u2_all.deb ad62ec4028a19d647b7c9d4001d4f48aec02dc07 313926 libdom4j-java-doc_1.6.1+dfsg.3-2+deb8u2_all.deb Checksums-Sha256: 70f0ff9316c7fe65dc5e7a184c95bfd17ab0db5cf55026a718a204162ef709ed 2353 dom4j_1.6.1+dfsg.3-2+deb8u2.dsc d586686e1888effa5eed9a2eb085bda534ed9387769079e4f9bc8fd2ab5da5ae 2315230 dom4j_1.6.1+dfsg.3.orig.tar.gz 6da6ba020143f11a1ddf8eef15145abf303bc3d782579be9ee21f219a12f2880 13340 dom4j_1.6.1+dfsg.3-2+deb8u2.debian.tar.xz 48c38dde6debcfb2b87ea55706c10f17c5642da33460c46f45710d8d6bfe645e 348384 libdom4j-java_1.6.1+dfsg.3-2+deb8u2_all.deb 89016b379c6f33a13ff272421f4fb0cce99643f0dba7b69b010dd541ca9e3ff2 313926 libdom4j-java-doc_1.6.1+dfsg.3-2+deb8u2_all.deb Files: 3a6288c6afa15f65a3e36db3221eebad 2353 java optional dom4j_1.6.1+dfsg.3-2+deb8u2.dsc 82a729746a518e9958373c3c0280a686 2315230 java optional dom4j_1.6.1+dfsg.3.orig.tar.gz a36ce97662324e2e75a5c941a437cead 13340 java optional dom4j_1.6.1+dfsg.3-2+deb8u2.debian.tar.xz 9f5b3ddc3553df93b114215fba343c1b 348384 java optional libdom4j-java_1.6.1+dfsg.3-2+deb8u2_all.deb 87d6923cf99dc1c6a771854c8894d2c8 313926 doc optional libdom4j-java-doc_1.6.1+dfsg.3-2+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl6ojoETHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlrtND/93Glf9NAwflGTQHBTY8qePfDZf0KfA AoPRfr6pjUhbc4f1KXWBYFpns+MXf9xZaCX5zMLiadEClIlZB9EkHm08cyGOPTgP JC9hYj1ZlaKUpXLUCWEFqBf2TzPjlWJsnnphdqKfpwH41qdmA6ZyhcKETCtgdczo I3o4ubZiQoem4UDhinABlvUku9hw0ba1RV3bSzQgyPsE+m5eo1QbBo0vEySkj3w1 wLFxX8AbabCoyPXeWiMz7eek61L5eauk6FvGQdJihrGGduhxdO5SV53Gqkx1KOuT Uim/lgz2Nhk81X14uz0a+tRj1wR8O/cILhCqqB3XLnslfhg35FhQv1mvvs4DHUrB 4i/WJ+YQSg/APWO7DwYvBEpmD4jdE+taLzoBrVGdZF365CKzizoUIO36Gm/7C0qX Tn/pYCZIyq5YSuTjoIaEp53PSPH/0SF+R173nMeVOzq9jaHXVh9DuZ17wt7Zrfaj lkzbQ/tLjryoGOU+yooMlNgHIE/kHD3uOyizzvPWlfLrEt2kFg3UFIBoo1aH5szu n+m32zBA8o6jN4GJLHoAuOqfQ9Q2ph8zPK61JAti/sEgpA44iwVd+swaSYmULtA5 WjRhQhBMgAgnlpFAUUFkeZPw2GQ31j0E716dRaS5ll/M6vH1oRQ6bvyhg3n9r7Wt Rme4Gn1nZG5Y5A== =eNlY -----END PGP SIGNATURE-----