-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Sep 2022 13:59:54 +0200 Source: apache-jena Architecture: source Version: 4.5.0-1 Distribution: unstable Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Closes: 1014982 Changes: apache-jena (4.5.0-1) unstable; urgency=high . * New upstream version 4.5.0. - Fix CVE-2021-33192, CVE-2021-39239 and CVE-2022-28890. Thanks to Moritz Mühlenhoff for the report. (Closes: #1014982) * Refresh the patches. * Add libprotobuf-java, libtitanium-json-ld-java and libjsonp2-java to Build-Depends. * Tighten dependency on libthrift-java. * Declare compliance with Debian Policy 4.6.1. Checksums-Sha1: 72550c3240b9b043c533ed8a27f413ae8a279663 2551 apache-jena_4.5.0-1.dsc 83966a00776162e2fe2f2cba6bf00389235982ed 7814853 apache-jena_4.5.0.orig.tar.gz d311cdec64d028a1fd2f4783715a9a22b235298a 20992 apache-jena_4.5.0-1.debian.tar.xz ebe592155d44d8a845df0afdc3f24310bd98c5b4 14248 apache-jena_4.5.0-1_amd64.buildinfo Checksums-Sha256: 15538875088d36899227764b9a2aca510a45ca70b8972f9828e824e34a3a8f47 2551 apache-jena_4.5.0-1.dsc 8aa33419153394598d90edcc339eef814f2f2e45bac384be3ba199fb62607b08 7814853 apache-jena_4.5.0.orig.tar.gz 06e786cbb5c68405ad65420ed32df0aef50cbd24d79d2d1454bc9e549f0837de 20992 apache-jena_4.5.0-1.debian.tar.xz 249439537c2a826d0d1441859400413eaf552c2d8b31ae539e77ed0f61db40ca 14248 apache-jena_4.5.0-1_amd64.buildinfo Files: ffda3f1b6113c836f6af94b670f218dd 2551 java optional apache-jena_4.5.0-1.dsc 18043a86f41f0f5f2bd5cf587e55b4b6 7814853 java optional apache-jena_4.5.0.orig.tar.gz f12dfcb4a074be0feef31580ee04df1e 20992 java optional apache-jena_4.5.0-1.debian.tar.xz 72c0f360ba54c31a8399d1cd675b88da 14248 java optional apache-jena_4.5.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmMu8mJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkkWkP/RDn5j++Zs5Byq0NJuICgrLFBhzj+0Qepg1R S7n8z8QywRiAeL+ex/8EJIv4FuFXVVrokagRNxFuTzPJCb5+G/UWuFognS+3OqIo oPErpuOlpPQaMY8DwaesxgITbSYwKcErkKM1NbrnwbzMmXS3skSEMST5MQ69OEco NuhhcENUiS83Sj2WrT+fT79k9a101axZGvhldDD5VMClMbAhXdeaGEHOp9JLhpp3 V5fqb/V0BbBBFbOKN8WMp8Ntp1qjaT3n7Sb6GO+tIMecsZb1QzlofPLJnOsquSm8 QbVXaILgCNb6b0+JFt6gZ3sgjVgxLV8NOKMGCz1Ae+z2Sx7QCq1iG6JIO0SuYRnq PQ0Mzvlzsf38upT6OE0G/ZM+eb3qr95jrbo04Wbyw9oyCIALC8Xe7CgT1AxbBSj3 7+NcgZKUQrUeWjK80ujWOVsHDVdMYfmnB/g7N43F+4TW5Dj0nH2dHiJGsJDHfG8j 9q/eN/XtPbc6lU1yjSj0uFEKeagAd59Az+EdQdCSWo01slH27cfUQZDz81ZK+bdZ tTooiX0JbYbnrqf/3BC+D0UzQPER4q6GKnZZ0kKdXljAS3fi1XXT1oH2gPVG9CNZ 7iGIfVTUOEMPDsfLqrQKHvnjRiTSJQLHq6Zndjlvpy+qdgGwu4i6xOUD02NIIx7o P/mcpsIk =rtHe -----END PGP SIGNATURE-----
