-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 08 Nov 2021 12:31:13 +0100
Source: libxstream-java
Architecture: source
Version: 1.4.11.1-1+deb10u3
Distribution: buster-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Changes:
libxstream-java (1.4.11.1-1+deb10u3) buster-security; urgency=high
.
* Team upload.
* Enable the security whitelist by default to prevent RCE vulnerabilities.
XStream no longer uses a blacklist because it cannot be secured for general
purpose.
Checksums-Sha1:
360b25ca7c84469dc70528a0650e258b312e806c 2591 libxstream-java_1.4.11.1-1+deb10u3.dsc
942c550bf12be973ae855917d20d81ab47920fff 10332 libxstream-java_1.4.11.1-1+deb10u3.debian.tar.xz
116feefbb6a461e89266535b1957540211e59755 13223 libxstream-java_1.4.11.1-1+deb10u3_source.buildinfo
Checksums-Sha256:
93ac239d73f123c6878675c9daa283d8961a3c66970ff7c87edf6c1e920d555f 2591 libxstream-java_1.4.11.1-1+deb10u3.dsc
ae749e93f76ad15c7b3759c2d155b28c3203f6fe6a8244a27bcd2f07ff71ba58 10332 libxstream-java_1.4.11.1-1+deb10u3.debian.tar.xz
6936e8ac79ac2717acb4d656c9b807262ccfc3643f185634e4c90bfc235cdfb7 13223 libxstream-java_1.4.11.1-1+deb10u3_source.buildinfo
Files:
28febf797a7329a789832ae536ab49e1 2591 java optional libxstream-java_1.4.11.1-1+deb10u3.dsc
dd6a8d48e0df1f12382db0de5b812278 10332 java optional libxstream-java_1.4.11.1-1+deb10u3.debian.tar.xz
bb16f3c4c0bf48dc47bef88e5b2b7535 13223 java optional libxstream-java_1.4.11.1-1+deb10u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Nu4B
-----END PGP SIGNATURE-----
