-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Sep 2021 20:23:41 +0200 Source: libcommons-compress-java Architecture: source Version: 1.21-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Closes: 991041 Changes: libcommons-compress-java (1.21-1) unstable; urgency=medium . * Team upload. * New upstream version 1.21. - Fix CVE-2021-36090, CVE-2021-35517, CVE-2021-35516, CVE-2021-35515: Possible denial-of-service attacks. (Closes: #991041) * Declare compliance with Debian Policy 4.6.0. * Switch to debhelper-compat = 13. * Refresh the patches. * Disable harmony because it depends on obsolete libraries. Checksums-Sha1: 1efeeed0e82ff8694f94e98eb4f2bdc1af03d441 2513 libcommons-compress-java_1.21-1.dsc 4f2346199b29f805dfb40b9ae2c71fd83f7943ad 11962280 libcommons-compress-java_1.21.orig.tar.xz 317e5d624f504d9d792cfd0bb4a8d51bbcf1c731 6564 libcommons-compress-java_1.21-1.debian.tar.xz 0eb16e7f3dcfeaab58ed3c22bf4d1fc466d491b9 15809 libcommons-compress-java_1.21-1_amd64.buildinfo Checksums-Sha256: 0fbb785808ee5ba4b87a7dcea499161f5f6900203d7a3fd6f9827dea59fcfcd6 2513 libcommons-compress-java_1.21-1.dsc f2613b0dd06347f6e1d7fd43aecfb94cfd4232c97bf58e5d94004a1a3ceb4789 11962280 libcommons-compress-java_1.21.orig.tar.xz ebabc1d1d72203deb681ec6e269e9b4377ed3ab3ff347b342d811051d134ec9c 6564 libcommons-compress-java_1.21-1.debian.tar.xz 600e955cf2ae8d74c912f1861c40116cd3109dc7ac621f94bd7377458df55a2f 15809 libcommons-compress-java_1.21-1_amd64.buildinfo Files: 37a7c33f90a2cd1fbd8fd076fe87d10a 2513 java optional libcommons-compress-java_1.21-1.dsc 2b195311a1bb5ce00c4ce0f4b693dee2 11962280 java optional libcommons-compress-java_1.21.orig.tar.xz 380a6039cdc56eda35bc6e082073646d 6564 java optional libcommons-compress-java_1.21-1.debian.tar.xz ece74e3fe37f3521929b359f9df44448 15809 java optional libcommons-compress-java_1.21-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmFI4qpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkpvEQAIc2Mfz9qQx2KHYayMM97FvLVHYR44YAA+OB JZiTQ4wCJItlt4lPp0xgTqaNzJCGSWNOmlVxp4BCxoU6tmUtQvApSOlP5vBbbVcF qMScIQMORW04XWtC1Ll8zUFNd6bTvsG/iDbYsy5YWE5I6xCGLXqa6OJxrZjgjgQR uw1c8uGgfodKRX28icJIvvHSHCMAZMrgWhwiFx/NBEzpJIGpJ/S+Amkra9b4Uw4B 5taFMo6bg5RUbBdvu/u1VlFR4yDe5O5Cj6c/y4cFo+uYPrkJTtBFSZRfr5/MPr8W WwrK/d1DbJNyNH5AKHwCiKr7McQHbywPLUlXJpu+8maVAI7Msf0PAPWt4OOFZ6OQ /Ew6hnJNcK3bxuLjqFKx9011lrypSRwy/eEoY0Eo6TGkQq1V/8QjdeLji6sYAp66 XOlC5ouEjlY5SQ6FqvXcVV9wKUR0xI/aCmujxmIMabLs11jppA1sOxM3IEvLQMvy 5rR9xB8ohFNAzIak5gFsT6Uc12I54p9MFVn90dlaNjoEA9zRFBlld6YpnP5zjyzV p649NAWxAi0u9nEPyI8EW7DwOl2JTAQ8N5kHV3bIwtQ5vALVRWkDKRRVYeb+ZFis fitfi1H+R4HJo5tgLrHA+m02mShTZE8x9Ktkg8ZESUehaHfmNdPlBK8IBpRjo1I2 XHPsxm48 =5rsl -----END PGP SIGNATURE-----