-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jun 2016 10:42:18 +0200 Source: libxstream-java Binary: libxstream-java Architecture: source all Version: 1.4.2-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: libxstream-java - Java library to serialize objects to XML and back again Closes: 819455 Changes: libxstream-java (1.4.2-1+deb7u1) wheezy-security; urgency=high . * Team upload. . [ Emmanuel Bourg ] * Security update: - CVE-2016-3674: XML external entity injection vulnerability (Closes: #819455) Checksums-Sha1: 7eb2236177b7b13cbdb3743cfc59ca3e1339fa3d 2446 libxstream-java_1.4.2-1+deb7u1.dsc 6b729a3ab509e6508573140ea4dbf273f9fee72e 486666 libxstream-java_1.4.2.orig.tar.gz fece4cd49eef246566c5d2f5862ec8492d5f14d3 8223 libxstream-java_1.4.2-1+deb7u1.debian.tar.gz 87130adb4eddb584e68ed8cda5404ebfedf1f41c 556500 libxstream-java_1.4.2-1+deb7u1_all.deb Checksums-Sha256: 69e37bc7ced210fb6127d6d20abd01d4975ef421dcca43b8a9ea2cda073abeee 2446 libxstream-java_1.4.2-1+deb7u1.dsc af651ed20251fec8c8e4178152ec522f2dc59163f3b86a3204863e374e35d97c 486666 libxstream-java_1.4.2.orig.tar.gz 4d4a0f3cb86c279a42a49a028789f342d0ae0eb90388dbcb0f277cebad21ccd5 8223 libxstream-java_1.4.2-1+deb7u1.debian.tar.gz 1a6718a90fc942bf8bacc397ffb04b1c6598d136f8935174dc585c43ef0aff3e 556500 libxstream-java_1.4.2-1+deb7u1_all.deb Files: cd7f1519dd9cfe12b1c2b3c3e4fb634c 2446 java optional libxstream-java_1.4.2-1+deb7u1.dsc c7a8a572cd3b960f8571e1aeff69f85d 486666 java optional libxstream-java_1.4.2.orig.tar.gz 5a0e8e3835cf34669ee34bcc43a05bb5 8223 java optional libxstream-java_1.4.2-1+deb7u1.debian.tar.gz 1c38b7d5dba44c7297c73cb8364ba7e0 556500 java optional libxstream-java_1.4.2-1+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJXVTyaXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBQ0YzRDA4OEVGMzJFREVGNkExQTgzNUZE OUFEMTRCOTUxM0I1MUU0AAoJENmtFLlRO1HkhewQAI78xRmk9XkZoSIoD4aoxoP+ TEmtWmyybxlt7OYD+gWmT9/LnJ1wfZMC1KWa+GQDDfyWPve33nl2OIbaarU3Nj1G VS9+scLWqKXC0dLGmEm++UVKfLd8rxN/UP2jdMu0g4JokBMJAPOjoS3jAMz9Ot1w yIL+LUiCrGiXurPp9uJSo2th5ZRS2IcwrxASSwyJZpJKIDs/5IlnrQ01RALgrpCg M4FVAvaNhG6AyBDG/qX6rZ+0ESel5L4YfJ3Y8PiQNnMKBt0WMbSnVHAQSIeDzBC8 W2ZOjSljeWtd2hGzotzHuSyuCqVWIWZ9KGklfkzIG1ygmzgkizRuujcnHcFSve6t 1SsamPVVDhQAR0dRt5Iv02VrlGhjwgZmshyi78bgYJ07zL4p6sVjw0k6LeLniBCA XwNuil4ZMpkNQKL+fGG+cMcEJiD9haXOXDIyRXUaXfCgaebAa+EkhQNNCH/nsPhD mXATzpw5EuetxIGBpIH9Kj/l3qEbPhd2wiI9gaa9Y6aeqmHi40sx12cf0BZVT2Lt 3NeERDWMlEMbjv5vgBcQOILA44oTWGWFwUoXv1vxr4dyZNvmBh4mrhg3XTEU2xs3 o73GXgt8m/MCmf/Fzhd2aQbsPM3TE37tT02/O/aV/W+C2XG71M2MtZR4ylZnstEh ViwY1mnDLlTc6veO2hRe =hM98 -----END PGP SIGNATURE-----