Accepted bouncycastle 1.77-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted bouncycastle 1.77-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 30 Nov 2023 21:50:00 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: bouncycastle_1.77-1_source.changes
- Debian-source: bouncycastle
- Debian-suite: unstable
- Debian-version: 1.77-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=xrl+IpjMVvy8vqdVXMO2VI7fh96TbwLyk8xF5ikW93Q=; b=PFIByK/UVpNH6JE8pZSPkPt87A gXGIz/a37gJ6iU7T6uaOXAHeK0/aco3FrgOfPyJon6EC3jOegucWWtSyzIn1hQ7OJotFLnqzeI5cB 8r3GvtVP5DkOTRTh7QDibQzq/QOm9coZNuqeklV5WuHgD02pxs5xHukzNT9SCPoAR66ArNlSiKaAC 7xP7g3zSEq7Qt9mZhvf5gmHPlaBiE/cPyUtnaEw3ugtOcgPrFV0jJ0A68RiAya5uriErOW6B2YbC9 rt4WakWkK77JiKHrIUdV1JVgT0JdBxE4P1qc8XiYW5skHSEzqgJEyYmTLKwawOCPw6g9g9LK/pflV LEK8WizQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1r8ov2-009bOx-I5@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Nov 2023 13:08:45 +0100
Source: bouncycastle
Architecture: source
Version: 1.77-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Closes: 1040050 1049356 1056754
Changes:
bouncycastle (1.77-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 1.77. (Closes: #1049356)
- Fix CVE-2023-33201: potential blind LDAP injection attack.
(Closes: #1040050)
- Fix CVE-2023-33202: potential Denial of Service (DoS) issue within
the Bouncy Castle org.bouncycastle.openssl.PEMParser class.
(Closes: #1056754)
* Update poms to version 1.77.
* Drop bouncycastle-1.72.3.patch. Fixed upstream.
* Remove backward-compatibility.patch. It is time to fix those issues
properly in our reverse-dependencies.
* Refresh the remaining patches.
Checksums-Sha1:
59e2b9c807d558c95645e878f8cd68d2ee0b9d75 2587 bouncycastle_1.77-1.dsc
55d8dbbc7dce0042aa5f6daaafc6f32290a0c135 7282456 bouncycastle_1.77.orig.tar.xz
823ff61d26565df4be019a7b62578200bcb59981 10444 bouncycastle_1.77-1.debian.tar.xz
46caf15c219e513a6bdb340c211053fb05facf1d 14061 bouncycastle_1.77-1_amd64.buildinfo
Checksums-Sha256:
018acb7d4b3e800d8dc1ba0eb174b8657ed6700cc7cb30eeee9e00552edc3b61 2587 bouncycastle_1.77-1.dsc
a78f0ef4370802780dba59cae64fcd021ef49936d863580059cbf1fd7a3c96eb 7282456 bouncycastle_1.77.orig.tar.xz
4db3b9871d98a01a234ae000a50a290e14c8362af18080aa8b093c071b16914a 10444 bouncycastle_1.77-1.debian.tar.xz
eb97902f28c5827b3092585b821009a89c453c00e938087ecca174d073a90214 14061 bouncycastle_1.77-1_amd64.buildinfo
Files:
97931d3f3be192d3be97a1f2d2ed00b7 2587 java optional bouncycastle_1.77-1.dsc
d37418e5e4e0479d263424541b927e8a 7282456 java optional bouncycastle_1.77.orig.tar.xz
ef7db0eb7ae399fa85f1eb31aae2f86b 10444 java optional bouncycastle_1.77-1.debian.tar.xz
fbc09a40b1ca3549268ed7c2c197acb7 14061 java optional bouncycastle_1.77-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Sn2f
-----END PGP SIGNATURE-----