-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 17 Mar 2021 12:12:00 +0000 Source: velocity Binary: velocity velocity-doc Architecture: source all Version: 1.7-5+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: velocity - Java-based template engine for web application velocity-doc - Documentation for velocity Closes: 985220 Changes: velocity (1.7-5+deb9u1) stretch-security; urgency=high . * CVE-2020-13936: Prevent a potential arbitrary code execution vulnerability that can be exploited by applications that allow untrusted users to upload/modify Velocity templates. (Closes: #985220) Checksums-Sha1: b697f295d600ab24d858778cb6e9de229d527d6a 2453 velocity_1.7-5+deb9u1.dsc 442fc7608c94c1ac2dc9a888e65aab4491e1f580 732413 velocity_1.7.orig.tar.gz 9f217efd44f886e50b289a4814b0462eff7c2583 9500 velocity_1.7-5+deb9u1.debian.tar.xz 2c894d693fe2ae0e80c74669896a147d0251f9d0 376460 velocity-doc_1.7-5+deb9u1_all.deb bb7d83d6fed35df96d3f955352247340406d7986 412962 velocity_1.7-5+deb9u1_all.deb efea04b1386f9de747d774865c0ca91be369ac7a 15567 velocity_1.7-5+deb9u1_amd64.buildinfo Checksums-Sha256: 7a37afd7482d3f3a881af8a227f7d7b3df11b47cf50b37dbfa15355f46a0edcf 2453 velocity_1.7-5+deb9u1.dsc 3d680327b600a84aca9e1cade288e068721d6291fcc9de57e2a1daf60183d43c 732413 velocity_1.7.orig.tar.gz 1da14dffb67d401941f185e164099759f6bd02645eb1462163d8e6e8daf4db34 9500 velocity_1.7-5+deb9u1.debian.tar.xz 57573c38e578c7e77db7d0280082edfe598c39bd8fb00d371ba03815b7c743fb 376460 velocity-doc_1.7-5+deb9u1_all.deb 88e476de05a21d00cc1096843b3b2ec12f04b6080797af11ca5e78ab654381bd 412962 velocity_1.7-5+deb9u1_all.deb 615019f9915c126a9122d1381ca01910166d5ae3da56e761b8d1be51a66ed356 15567 velocity_1.7-5+deb9u1_amd64.buildinfo Files: 9da0371417e63f0714c6109a7dd39135 2453 java optional velocity_1.7-5+deb9u1.dsc 2fecbd18e77423a4cd623e6043f38bd4 732413 java optional velocity_1.7.orig.tar.gz 0b0110b8614984f89ad413dca5be9a7c 9500 java optional velocity_1.7-5+deb9u1.debian.tar.xz 317afbfc82f91e10f801c0134c660391 376460 doc optional velocity-doc_1.7-5+deb9u1_all.deb 24688628c3616ab3a716225acbbc5c92 412962 java optional velocity_1.7-5+deb9u1_all.deb 424410536afec728a453b2c8f2f6bd2a 15567 java optional velocity_1.7-5+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmBR9QIACgkQHpU+J9Qx HljKYA/+Iykt7Gv3X31SFHBYqs5HT2Xh8zQ3c7ZKkhc6ml0+H/5QuzsyAxdw9zlv WRofiako2+07eemffjf7Vatq2nOL0wxHjwPuEqmomA4Aa1i6rfIFG7pKz411k79+ 0PQpd31m9nFOy1mRnwL2jlMBCqimhdoRFVfndNMTCpiz4e5LQiQ3ALYx0PAsRswJ 8WuxcSpE2ZbNined9kUxD6m/cH5LlYmcw2C9VAXmwB6HALswqv8DC1H3JHd3F9g9 uYjqSqA18cpqeFP3Ooqdxn3cQnzXqTBNa40kMHniNOGRmwgZhsZh3s55nRqqKWYs oKK0Xag6709UbU8ASuPK2mqXyimQTmZdO6CdyWVszyWyAB/Vj93LT5SeJGp312MB n2DQg8I4eT/A4huAhrEjxBR1Drjm7CuRZX5JffmR2e2ZNyAv62QZuDchlwpiXTTe ziTR6+gOrAeqFRG57IJdbZT2+aMuHN2c3qm5oz3g2A4q3Hj7GPzezIGOWnXmPhZY Z+N8jOyufC3nEJopuVeUNLElGu1L+495bRQmuL3lGDyobLAVRi8JZxuT+53tXjj4 sg90TItK03ajMqhIl5Q4FoUkZpPoBS3PaENpJ5lmsy3Xw40LIragcXjDPPnOwWvI wz6jGfFPsDhUggkTi+QJV2/QpNJL18KftmDECJFQrV2iQ4U5Wtg= =JUSi -----END PGP SIGNATURE-----