-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 17 Sep 2020 00:37:53 +0200 Source: jboss-xnio Architecture: source Version: 3.8.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Changes: jboss-xnio (3.8.2-1) unstable; urgency=medium . * New upstream version 3.8.2. - Fix CVE-2020-14340: A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. * Mark libjboss-xnio-java-doc as Multi-Arch: foreign. Checksums-Sha1: 67cd2a645b4dc5fa5bebb4b4abccda27eee90a04 2497 jboss-xnio_3.8.2-1.dsc 1d24abdf2702dff2ac41d13de5c3ced1da4f02ab 417392 jboss-xnio_3.8.2.orig.tar.gz 8f0202f4378b603b2210596e7ad61da408d4abb7 4396 jboss-xnio_3.8.2-1.debian.tar.xz 0c72318a72e42e1dd732b9694c6bb458023487fe 12785 jboss-xnio_3.8.2-1_amd64.buildinfo Checksums-Sha256: 02d6ca4229960a356be49003fcda2d16875d05e440cb37c7c1e073f78d25e1cf 2497 jboss-xnio_3.8.2-1.dsc 85843ee5ac395c60e75afe4622b9e04e3a5b97747bbc8a664e66d2e2b8647501 417392 jboss-xnio_3.8.2.orig.tar.gz 6bc8497cc127229b8b72e9caecb57dc0f2770a80def04f6f398c4170f369f6a8 4396 jboss-xnio_3.8.2-1.debian.tar.xz 50a48d417a44800ff153d15759f637a79ed00ea01d79dd3f0752f9e9eb00500b 12785 jboss-xnio_3.8.2-1_amd64.buildinfo Files: 1e376eba230e092e14e85c0b07363e4a 2497 java optional jboss-xnio_3.8.2-1.dsc be4958264c6df8ded38fd5a23de8aab6 417392 java optional jboss-xnio_3.8.2.orig.tar.gz 174a04dafeae370bb119f1156ce9e5eb 4396 java optional jboss-xnio_3.8.2-1.debian.tar.xz bff81d702ffa1c5a4e1162bf509b331b 12785 java optional jboss-xnio_3.8.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl9inDJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HktlEQALyKZfi73pVqmzlLSGu323UwjKwwfnwXT71j 8CfTn1opE70zth1p+2YW6V4hEtRE/kJNgLGQvD21btM/hATMGuB/b9DoD9dQwjVn aMiyaAljavs1NWOV94hAB9WgBYGHyEuHCAo1Zc+0xZNlulvlOw/N6bd21k1N96/+ 7ZH3AdIMWkdgq4ooDW1dNXtH0iLQOhH/lsdPJLxqkMSuWpwJ2zrd06vNbhEfsDpJ R3BLW1AqA5V2FQ5Q3PGJnyaFNWOD4Q1oZOnqhR2AHUditNwBpPs/31lVqPQdeKOt P7ljApE7PTdLSpkTqOcpJQoPk+zazUfUwjjPsaT6zS5rNzci9Htakzo1bEiOoVYr FeNqQwYpnpxOMHbDPgZPjyVE9EmSP4gWv3ZtSQhA3VNdQlPla2lD4vJA5w3w5miT cj3UVj03XsXBqL5eTGHx7TCtazXeXwvMLUlWTZwKs3KZkoFGmVps6/kXkXzc5BOY g8EzsM+yGMsr9jsE/qINhqWWzCKv4BEMPw7XfvSV1cvLMUShy7Qtf0hiaDj8bqiN daeki2UjJkmo95AHC+JRq4+Hipw07OedpDrUeu58lIZWD0pE4Kd7KBhbYJ+owqKD lOp8eptFNKL0sbb72FZcsBp3PWI3pwSxnR9f2NM5hm/pxXXfGv5OUjYNIFInf2VC ms5oGT36 =PNdk -----END PGP SIGNATURE-----