-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 Jan 2021 22:30:25 +0100 Source: libspring-java Architecture: source Version: 4.3.30-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 973381 979723 Changes: libspring-java (4.3.30-1) unstable; urgency=medium . * Team upload. * New upstream release - Refreshed the patches - Fixes CVE-2020-5421: RFD Protection Bypass via jsessionid (Closes: #973381) * No longer build the deprecated classes dedicated to JRuby scripting. JRuby can still be used with the javax.script API (Closes: #979723) * Standards-Version updated to 4.5.1 Checksums-Sha1: 974e493e89534d5a8c0a40b372ec60dede6b4215 5260 libspring-java_4.3.30-1.dsc 5f11ffe48d283174ca5ccb7683f40a94f3cd9f96 7208172 libspring-java_4.3.30.orig.tar.xz c602a31deec607d5eaf072eeb5fedf6fd336ef02 21008 libspring-java_4.3.30-1.debian.tar.xz 09f98172fb6872de5f6b34e920948f8ab0d9dac0 13916 libspring-java_4.3.30-1_source.buildinfo Checksums-Sha256: 695de59f936ac809be028d76d75d3f194d8a73d6415220c24a84d52558eb6c71 5260 libspring-java_4.3.30-1.dsc 80b31da14c048f74a0ce0753092228eac751e33fe05bec5f251cdb3a7aed91ca 7208172 libspring-java_4.3.30.orig.tar.xz a37fcec130da198b73120f194a87098c14dec141653a4b1e2bb9feff764f2890 21008 libspring-java_4.3.30-1.debian.tar.xz 040f11ae6925e637a70fff3f3d8359fe5703e9bbca757abddfbd62b2071f2a58 13916 libspring-java_4.3.30-1_source.buildinfo Files: 50a21730a81356cc64b012f2505a62c6 5260 java optional libspring-java_4.3.30-1.dsc 8bc2fa2f91a2a6f093ee23a43b4957ce 7208172 java optional libspring-java_4.3.30.orig.tar.xz 3b85796322a6f454f64f976e0f96bb44 21008 java optional libspring-java_4.3.30-1.debian.tar.xz 055e3d3ba288608feb4e4e9a8aa62680 13916 java optional libspring-java_4.3.30-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAl/7cmgSHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsPowP/A2Vw1uXobo+QVlSfJnek0UvOgrdvABA ZFwu2WBjr+RnVlz2cUkjc1S2LeEjGCjgJhSe3+P3Pjx/lNR7x4QQGZ4eBbjNJS3R EF1oLfr+5An6ODwwY/2b6dc+Rpq54drbYp6Ps++yzCzdhhQWNtGU4wAOI6fl5YFM IUx8U24txIXRdedutXu9+MICb30V6c8ylQ7c8aQCP2fsGYhMufZPy38wT5lPPIxN rjn4ACuyrSVr87Uw4aXABqd3LYWo2tI9kuYRUazIF1+K5HW1f2cipAYhKrG3lpYy 5vqztl0FmWg8PtGHxd0+nkQ5jdn3SJs3S8PHyyMzlBg4Q3qH1tMbYmY/5bW7XB2C OiJ23u8eNdg1UgZCf5AaO4dVnyZewiYLup0OEBMZ3TNctjVRlVzhFnwlDtS2xaYl 89Q1G7ll45UE6ok2Db3s8Et+KGueMVnLBvxOglv/49md/nYoVYBDn+fV2d99hy0x Uk5YC+wBBeVLruge9mroVUvjuxFwqtvUjqUWkuzTBqqlWzHSsOmzauJr0k3XM3rY QnvVME6+Ys3nLZNm78sed8W/J03jVLIWd69M+g1o4J2wJXzzxeZZojrx7DyUxrjH P03rTbc354Q6u6gYhSVA4ma7J2p4KNS3jtafWjQMiZkF/7yxnJNq1oCLcB0aJkJg B4Qfbancz5yd =UIpD -----END PGP SIGNATURE-----