-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 29 Sep 2021 16:47:37 +0200
Source: libxstream-java
Architecture: source
Version: 1.4.11.1-1+deb9u4
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Changes:
libxstream-java (1.4.11.1-1+deb9u4) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Enable the security whitelist by default to prevent RCE vulnerabilities.
XStream no longer uses a blacklist because it cannot be secured for general
purpose.
Checksums-Sha1:
f1588b78b47a7acd2f1472a3fd5b543c4ed456c7 2586 libxstream-java_1.4.11.1-1+deb9u4.dsc
81d217d4c728ff871cbd12082ae0cb1e93b20ba5 10888 libxstream-java_1.4.11.1-1+deb9u4.debian.tar.xz
7a1751b2b9c038e355ef19f7a815ec07894f8018 8344 libxstream-java_1.4.11.1-1+deb9u4_source.buildinfo
Checksums-Sha256:
c7c55138bf8fb7f31e755350baf0388163479c4656b37b300205e5a80e1459a8 2586 libxstream-java_1.4.11.1-1+deb9u4.dsc
8969e570933938dfb2e2d934224183d3d4a83d370bb05c083f396bc78905ab2c 10888 libxstream-java_1.4.11.1-1+deb9u4.debian.tar.xz
57154ec6f9d1223017993fedee877e2e952239b02e55b95923d9f73099f405e9 8344 libxstream-java_1.4.11.1-1+deb9u4_source.buildinfo
Files:
637fd7a2ed719da6323d893873be938d 2586 java optional libxstream-java_1.4.11.1-1+deb9u4.dsc
c9f3a6201c843c897240c60e14ea674e 10888 java optional libxstream-java_1.4.11.1-1+deb9u4.debian.tar.xz
5905e12d76eb36ce71f15d95fe258566 8344 java optional libxstream-java_1.4.11.1-1+deb9u4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=83L+
-----END PGP SIGNATURE-----
