-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 12 Feb 2015 09:11:29 +0100 Source: wss4j Binary: libwss4j-java Architecture: source all Version: 1.6.15-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Description: libwss4j-java - Apache WSS4J WS-Security implementation Closes: 777741 Changes: wss4j (1.6.15-2) unstable; urgency=medium . * Fixed security issues (Closes: #777741): - CVE-2015-0227: WSS4J is still vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) - CVE-2015-0226: WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property * Standards-Version updated to 3.9.6 (no changes) Checksums-Sha1: 1919d3cd5bf05dba2796069d251f0bd5b7e95b9a 2124 wss4j_1.6.15-2.dsc 6461136db69ddd7e46064fdd750e1c7823ab5fed 9548 wss4j_1.6.15-2.debian.tar.xz cbaf5c5cb4ab1f8015a2912c7791aa0cb5da9cca 342064 libwss4j-java_1.6.15-2_all.deb Checksums-Sha256: c8a93f439e8c2abd7c95ec246906ee0b00f7fc0c390e3565d9fe66606d782eae 2124 wss4j_1.6.15-2.dsc afa2ec0e05322657fe15544fdbea842fccc32f3195b97b2e77566202a513983d 9548 wss4j_1.6.15-2.debian.tar.xz 9c89700350af318e28122623408b8108a923f21edf16dd76cf05bce2bc9e1584 342064 libwss4j-java_1.6.15-2_all.deb Files: fd08438daabc8ebdc12855052c47f2d5 2124 java optional wss4j_1.6.15-2.dsc bda8c06272cb1f22413e8a55619e0901 9548 java optional wss4j_1.6.15-2.debian.tar.xz 82181395bd8f9f68e3a3157c0bb6f81f 342064 java optional libwss4j-java_1.6.15-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJU3GrgAAoJEPUTxBnkudCssR8QAISJdMUJjehMXcPjaVaAaAr1 HhHyq6BWoko1xgER1rxo53uVLFTbHFFv3DZea6Mi8j5XihWwXsBiofcyc6hWFl51 ZU2zLuU5oImy+oCZ5AcD1Ej1z4rLJNiDNMr4aBwl271CehULRbVREcVJfHdxeoWS Ra29TXcjUV7M6cnGWaXHOFS8/Y6RGrSFY9FH2zgt8Rs4ubsnnxWQTcXyUNJE/iM0 AjNcgiixv/v2fnT1Fjvj5TTJdSzxsErQ3AlfGWlpBW1MAfPTIKPNmEceQF851ois NktPLPEHMf1yD7a6NjClkOkf0ucF01IDg8tIkQ2I2GlQe7jtvWzLEkkdp/6qxy34 UsrEJQdPMJe+aDW/3Bln2RjnmnM38bl65/TjYhBQ2KSZj+Z6hbZk7KVvLY6ExUEk 9gU1NK8GmWoHLZwduCwfbVxKi2iCsroBj1eSSX0X2JPllsxwFRxUcYynAQoXfrsn NR6sopazpPiV1qTSw4fsUfrcIERRgEw1+1n79UEVPyawsvfVkBd6fVFeStxMnf2y VsKe/az6CJFunbXekz3nGJ+Qv+xPHpGffCRwvncdoKgjqHz9wTna/K9ktDs0pLUg N2D1oU7lq6zvek5JGRX4fk7LySda5hmwj6pshM4LmTJi5lzvbIhZ7sFEtYRMLrag 3ASaDBGKaZenmQnXI8Jl =BAPI -----END PGP SIGNATURE-----
