-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Jan 2017 17:20:04 +0100 Source: groovy Binary: groovy groovy-doc Architecture: source all Version: 1.8.6-4+deb8u2 Distribution: jessie Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: groovy - Agile dynamic language for the Java Virtual Machine groovy-doc - Agile dynamic language for the Java Virtual Machine (documentatio Changes: groovy (1.8.6-4+deb8u2) jessie; urgency=medium . * Team upload. * Fix CVE-2016-6814: It was found that a flaw in Apache Groovy, a dynamic language for the Java Virtual Machine, allows remote code execution wherever deserialization occurs in the application. It is possible for an attacker to craft a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects are subject to this vulnerability. Checksums-Sha1: 48a2d1fab1b406bbef341f9af1ef79265610ca44 2634 groovy_1.8.6-4+deb8u2.dsc e1a670ddff14b6d5306d14ee0f22a22d573fbad6 15328 groovy_1.8.6-4+deb8u2.debian.tar.xz 2d6f71a050b94c2eb81104427448a5133c71505b 9729194 groovy_1.8.6-4+deb8u2_all.deb cabc37815fb2b3da022fd4402337e5816915afd2 2440660 groovy-doc_1.8.6-4+deb8u2_all.deb Checksums-Sha256: e54ef0c358d71c2fa745b485bdd46b9ad5e0b206b6bed197c7d59b685a28c038 2634 groovy_1.8.6-4+deb8u2.dsc 8a0c96ab12a8b3c4f8f846cf7d2e71cc439465d8a54eb8e3a3f121f37f6b411e 15328 groovy_1.8.6-4+deb8u2.debian.tar.xz c3596f3a1b8df06fbb214e9a9a69f4a8953d33295b65c03d9a7b749083cf93e9 9729194 groovy_1.8.6-4+deb8u2_all.deb 8baba40939cf92c28bcf45bcb23c427ccd79e543399a6cabf1867265139cc826 2440660 groovy-doc_1.8.6-4+deb8u2_all.deb Files: c7a79603f8e901ae120217091e8c6ba1 2634 java optional groovy_1.8.6-4+deb8u2.dsc e68138b4c31289d127af0b11e09a02a1 15328 java optional groovy_1.8.6-4+deb8u2.debian.tar.xz c1a5d57458960daab77ea1d04b95bf79 9729194 java optional groovy_1.8.6-4+deb8u2_all.deb 762621ec4b2b302602a731aeafd48d32 2440660 doc optional groovy-doc_1.8.6-4+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAliqPitfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkCRQP/A5auTT5THu7IWbTZrRbIEjvZXJJDAhMXeiD A7Xf8FpnQGdD5jEq2m2RIub9fWoEhVkCfkmolQUIK3Kfg5vMUNzUpr4kqMLddgsl +ptgBUCIRuXGHlS2IcNOXMDsWLyUxW/XBZ+mAVSmnnxnC1RbubLqVdMEhnAuROJ5 0L/Z0jvwemQTpJ4fMSaJPWWxRx8fk7V4FlWsBB5s+ra6nJZnqg7/SiPTH8zhF+Uk eZUlytsYr1THBG4TfvWKl491Wh0bD7YpRZyTWiBoqKxbTguYl3hwE5v6KZhX5hyZ j2aGZoMGZKHocKsSQ9q2zwkX0rQCZQTCdUdXAkjqJ4k3c2x1sTGqFydegopNIGWK RnUSwt0+pMShdNNB66ycrXwvuRkXSfFqwiUn1DRqzo3Tn774x09GgGOk2rPfWTP/ 8e5EC10PLqUbhkV5tZRrzz08lx7QALIy4Z3MopahsfAnebF2zpyZgGm+csC57LsJ MPtzdhK9IY8kCzgM/D0h2f70Ssb2gutQj/5Q4JPsUYEhIgWxpi/eymuj+hIF/kik NSRBVh1/cXbRQ2T1rVhjxkv5V5NuxpzLMttY4HthdD5WQU7k8U6GEWj1dvOB6S5I TTXZmQBm4pBdZm0UmqAtE+lDdJUmbph8mHqROjiFq8HYoWe5WqFypHMtSU2t+Ir4 GuXdYnCr =YmTv -----END PGP SIGNATURE-----