-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Nov 2020 20:46:52 +0100 Source: libxstream-java Architecture: source Version: 1.4.14-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Changes: libxstream-java (1.4.14-1) unstable; urgency=medium . * Team upload. * New upstream version 1.4.14. - Fix CVE-2020-26217: may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. * Switch to debhelper-compat = 13. * Declare compliance with Debian Policy 4.5.1. * Ignore org.apache.maven.plugins:maven-antrun-plugin:jar. Checksums-Sha1: 2d1d7dadd7671b45dcb2f24bb5d83f1e104061c1 2520 libxstream-java_1.4.14-1.dsc 205508d0faa0d64090f49e1d5a5c65502bb64e68 450524 libxstream-java_1.4.14.orig.tar.xz be0850cc330df57c6678ef0ebc4c5f576b9e0f4e 6980 libxstream-java_1.4.14-1.debian.tar.xz 18f06ac40f96e4428338557da6a7f18beaf941c2 16161 libxstream-java_1.4.14-1_amd64.buildinfo Checksums-Sha256: 93de3c71301a37c9bd1551502c110d937047b75c422eb06480497ac15c4139f8 2520 libxstream-java_1.4.14-1.dsc 85aeeecdd812b43c676a79ca19414299fea069f9a7eb97c4bc5c0f3f7593d875 450524 libxstream-java_1.4.14.orig.tar.xz cb3387ec1712c9e6b7a18feb68b5cd6e0512ee817b214fca31f286ec1d2d4287 6980 libxstream-java_1.4.14-1.debian.tar.xz e705835a151caf45616cdfdc1b7d9b77d97f6334af8ac293ef960970d2f70859 16161 libxstream-java_1.4.14-1_amd64.buildinfo Files: fbeaee3d8c84ae67ad0346809df9ac13 2520 java optional libxstream-java_1.4.14-1.dsc 7460995f89b3f617e79fa14a6cbdb259 450524 java optional libxstream-java_1.4.14.orig.tar.xz c41a6a89a2a259e87aa1c2492973120d 6980 java optional libxstream-java_1.4.14-1.debian.tar.xz a1fd297f4c8560b56a8f5eedb6956fa0 16161 java optional libxstream-java_1.4.14-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl+2zPVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkEnQQAMdAGHMX+kcwL97j4vEAc7upmZDR4lEdDQSc IQ7mLJqRqECqWDFt6OSrye7rjIPV+3mH7nIrhwsA7VjLVusjU4+GjPVln0K/gZUs mbLIkwm4JvYdvhacgUXbIVVkhq3sXhHfOuRRMlsPvjgxJ4W/93lrW6dspyXcff/1 Pa5tRQaZP21gQSKQJabc02HhsVNcFphE8Url9EaNKlaHBHrggMSAAoqWkGxcXlbf k5LEkWuyAEuN3aH61OlOEpwydGYigCFLwUJwxEfZ1gQ3KFxRLHCI3pVS9OhHE0Nl RjOAce3fcp6AD5j08rkINyPrhZ1PgHAHRVLcqG7guejOd/HJGF8rwlFuJ7t/MrMm nCvIf5mRfIZlHyjy3t4YdwV8BFVglhIH63gd9CekZdU5Cky5eu7vNdP0V1WE8yFg 89iBnR8gNCA73pJdLZ4vWpXH1jfQnG8hu8Zhr1+LuhGBLdjUxp6eIWFg9IJLYT65 3D+eKuUw3ou0IsqagcmrXYdJIv+RvYYzdoawYRCEyb05QA6bvKlYNYM/c6M7vOi+ pOjcugUyH6w9iJyWowcO2wKWsYxoGeiv2f8mrV3HdcBNgMDzhzJGbyJyYskKdYTA B73geAY5T6hnkr/cEbrvTJLc7ZN6VyQphOHMbpIaYFnd1UUf9REnNW9qKaCSclL3 5MUytkEH =c01B -----END PGP SIGNATURE-----