-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 31 Dec 2022 17:01:02 CET Source: libjettison-java Architecture: source Version: 1.5.3-1~deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: d628eabdc433de5ac7c65118e458d67233c825f5 2275 libjettison-java_1.5.3-1~deb10u1.dsc cd806d8acda7345be602f3ddbeb3a5e30c2f71e2 72810 libjettison-java_1.5.3.orig.tar.gz b0eeb12afffd9fe566d5a58742c27d1123fbf21e 2996 libjettison-java_1.5.3-1~deb10u1.debian.tar.xz 1345c2fbc7f780655bdd0a9e4a79131914fedd03 13570 libjettison-java_1.5.3-1~deb10u1_amd64.buildinfo Checksums-Sha256: b64fa065c03e78e10cfa13d1dc510d817e48c3c1e28ae1fd6d34db2db0c2f75c 2275 libjettison-java_1.5.3-1~deb10u1.dsc c68ff9851b25789467e8168b3e54ada18e21964fae2b1986027e6bf133947920 72810 libjettison-java_1.5.3.orig.tar.gz 75213ccd0443e2810e95644806d5a9628cbe177a8eed28c6c51812541102f176 2996 libjettison-java_1.5.3-1~deb10u1.debian.tar.xz 99f70f30ba24d705638c500d8e3d34c1507903545b16789a9127eac74cbfb63d 13570 libjettison-java_1.5.3-1~deb10u1_amd64.buildinfo Changes: libjettison-java (1.5.3-1~deb10u1) buster-security; urgency=high . * Team upload. * Fix CVE-2022-40150, CVE-2022-45685, CVE-2022-45693: denial of service via stack overflow / out of memory Files: 46946488ce7afa63c1718c887a98c727 2275 java optional libjettison-java_1.5.3-1~deb10u1.dsc 4fe6afb04644a6a85ac23fb35a663935 72810 java optional libjettison-java_1.5.3.orig.tar.gz 8323f28672e685c2b07aae0b9f647835 2996 java optional libjettison-java_1.5.3-1~deb10u1.debian.tar.xz f5c9ea702587bcddaeaf4ffe27ce58ae 13570 java optional libjettison-java_1.5.3-1~deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmOwXMJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkztoQALholpB4N3Zn173qTIrMKEyYbgHX2ulA3oDY z7CfZKJi7ym2iaR5PJKU95rU+9ihSZwMOlfqDirFnW0xDGbJbGN0/bx/UUfvKtn8 sEfUF1SNMOTSZrrdDe9nWTd1J5GWY6bHw8HbRd9oQRK8WeLC+3rxJDfInr1x3Rwx BiXi7CgKKN1UL6twqwvZNW9IzuhBv7hh7ZW/KcpoQkFzHjMCRAFv8eh0RxGwvlzx FapCUDwoAcKCOInzY965N0hZPnXUhMOALBP//AET1GIYHwmM9bjxwVH/0s0U/HNX IaXBlRqn6VEU3FM/+13j7xx+Pps1Frql5IpjlAkiZfYPC5RgtD2B9BDthEqV/p15 d+mPgjeDQQfoLR5eSNUWodQ60JzDdxVicsqEXrDH9F8a5kZtOoI2QPE2j99boFhs EBUOhhbYPNTLHa0pDVtf2xZSXUu0CxAT+C615nkXFeULNIEWXe3uOmWcxWvrrN38 4GQOeuClwvMferQWz95hqmOqT3uTDYiaivyF/1CVZ3v8L71rsDS53dgPpPM6vzqb vjKn2vd9JgEd6AkwQ0C+75VUhn2o463ZvQLUHOPwq05ipM9IkfBAxXudQIfr0MiG fzF8RpcMEeI6URGXBs/pVrpDyhiw1qu8o/RN8foKXKt6cowrWo1k4VZvDvEcEUWj 6vV5R3Zw =UvNH -----END PGP SIGNATURE-----