-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 25 May 2022 09:11:51 +0200
Source: libxstream-java
Architecture: source
Version: 1.4.19-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg@apache.org>
Changes:
libxstream-java (1.4.19-1) unstable; urgency=medium
.
* New upstream release
- Fixes CVE-2021-43859: Denial of Service when unmarshalling highly
recursive collections or maps
* Standards-Version updated to 4.6.1
Checksums-Sha1:
f69fa700415f3960ddc593bd2efcaa2c10ce90cb 2397 libxstream-java_1.4.19-1.dsc
7d3691700c4c0ca9f85e04a9ff2e600c8613f0a2 474196 libxstream-java_1.4.19.orig.tar.xz
38f205a182f5699ebc7c6f2d035009692d1fa5f1 18008 libxstream-java_1.4.19-1.debian.tar.xz
6eef7eac96eca9cba396c756722311d40b660090 18430 libxstream-java_1.4.19-1_source.buildinfo
Checksums-Sha256:
e26452eae1a857e5366b2ae7b0de0c34419b749a9d0ab84b812157aa892de0af 2397 libxstream-java_1.4.19-1.dsc
7bc71cb4d421c6270a1824aa617c14b29b46cfef27ab924855f94f1674632628 474196 libxstream-java_1.4.19.orig.tar.xz
7724f4d8216b1a1fa7c2b20f9b060ec0d28a160edd936abb47a9b510222af7d3 18008 libxstream-java_1.4.19-1.debian.tar.xz
d2f195a0ef0721163c9a4dde223e95188647ec51b2d33fae8663860711c5af9f 18430 libxstream-java_1.4.19-1_source.buildinfo
Files:
691827188d54231a34aa8857cbf8b722 2397 java optional libxstream-java_1.4.19-1.dsc
aa45471b3e2959b855005cca34be549d 474196 java optional libxstream-java_1.4.19.orig.tar.xz
f31edbe146912d12cbd0ec6673ebb623 18008 java optional libxstream-java_1.4.19-1.debian.tar.xz
9612fad26d3c31bc339b54cad14af4fe 18430 java optional libxstream-java_1.4.19-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmKN2dgSHGVib3VyZ0Bh
cGFjaGUub3JnAAoJEPUTxBnkudCsREYP/0TzaEuDZr14pQiL2THudQqS8NhKsfgD
VWxCd/radWNfoitZMh5BaEnMLeWtwvhCiBL+t+mbcgDCEBKF2i4RkGZPNWkar/yi
OXfpnJmpizjR+/0IWlRPBgQ+GPMP+pTHnJ7P1jL/kcmVpPx4zTuiF7NPw4YyA8Sk
xX+NXOMJ/JMbFGaI+YRgQtihFWAi135Kn1D0gdOy9PfZ+DkXCdWJFW6OPpQfCkE6
LG+B6q92u1dxOA7r7FWtxjXbF8Z1QlUYiEU4pyLOxrHJv0y64LgnAuFV177e35bQ
4ObfdCHMGAS764fbLDdcg9pEkn2F59F32ujSTa+Yx+AbYr1Q0gdCrZwBmqSqpJxh
MXv+zOnoPa3DXmXMF7ccxZtTM6SxcKpW5QYcqSQySKD3W/9hbh/bSn6B3cXN/T+x
ujWx/r1APCED652eCRTj+0jHUJyixSXfQfvsecLFCL4XMe6m8m4RoqnDT1TEp7ah
F4XSEDPSCcPA/aX3+gnHA4w66jXyUS8V2XEmHq/ewbzMKlPOOlSHN7OYq728yqJt
BkfvOk/i35rsHeNNgE3NYVvXG/x5C/zuZSGdsX2TSEycCTlFl9jj1ZFpo9adB7l6
pBr1m/TNHxAbS+yl79qfkvrXj4oJIVypNkWjHYUzDaatHPKQoc62AAhymj/9YrJg
XKCnUwtaIFSR
=rrGk
-----END PGP SIGNATURE-----
