-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Sep 2024 10:36:48 -0700
Source: libjose4j-java
Architecture: source
Version: 0.9.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: tony mancill <tmancill@debian.org>
Changes:
libjose4j-java (0.9.6-1) unstable; urgency=medium
.
* Team upload.
* New upstream release
- Addresses CVE-2023-51775; fixed in upstream 0.9.4
https://bitbucket.org/b_c/jose4j/issues/212
* Add patch to address test failure on Java 21
* Remove CVE-2023-31582.patch; fixed upstream in 0.9.3
Checksums-Sha1:
48ed13b2b61c439d25f65ad936297821f75f321c 2270 libjose4j-java_0.9.6-1.dsc
7bd81d147a6163ea36b5deb860ebd0d5f5f09646 323104 libjose4j-java_0.9.6.orig.tar.xz
4d6341e89f6877cb9882232e2a30de291cb28fd9 3600 libjose4j-java_0.9.6-1.debian.tar.xz
b816d27950886a728cf8f5c86596b9458e960302 15849 libjose4j-java_0.9.6-1_amd64.buildinfo
Checksums-Sha256:
8084daf2d602dfc1da5a1d9b110f12ef14692d1e793f26976a1aaa303ae9f278 2270 libjose4j-java_0.9.6-1.dsc
71918b093b3e792dcae4fecc9dde51f0833d20004b0fac10207a65da84ab2b16 323104 libjose4j-java_0.9.6.orig.tar.xz
46bcd30e5f64e9dcdf89a54d3eb93bf6edf0b81f94859a8e63cc01322d45c16d 3600 libjose4j-java_0.9.6-1.debian.tar.xz
820f41d5032fe2d394a3e6baa3671bed34b00dc700e2536ad8f44ce5ccfd5fdc 15849 libjose4j-java_0.9.6-1_amd64.buildinfo
Files:
d1f0f3dc0d1fb3bb374ebe4333665d5a 2270 java optional libjose4j-java_0.9.6-1.dsc
ddf74900d85bc4eb7adee2c5e00a990f 323104 java optional libjose4j-java_0.9.6.orig.tar.xz
540833bc3abfcb0d4dd13acb2742a505 3600 java optional libjose4j-java_0.9.6-1.debian.tar.xz
d57fda24dcfc8979b8ca39407d553b2f 15849 java optional libjose4j-java_0.9.6-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cVzR
-----END PGP SIGNATURE-----
