Accepted activemq 5.6.0+dfsg1-4+deb8u2 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 18 Mar 2016 22:24:17 +0100
Source: activemq
Binary: libactivemq-java libactivemq-java-doc activemq
Architecture: source all
Version: 5.6.0+dfsg1-4+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
activemq - Java message broker - server
libactivemq-java - Java message broker core libraries
libactivemq-java-doc - Java message broker core libraries - documentation
Changes:
activemq (5.6.0+dfsg1-4+deb8u2) jessie-security; urgency=high
.
* Team upload.
* Fix CVE-2015-5254:
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be
serialized in the broker, which allows remote attackers to execute
arbitrary code via a crafted serialized Java Message Service (JMS)
ObjectMessage object.
Checksums-Sha1:
b3312d29b72e5edec8b4c9f303ed200c1da11c05 3508 activemq_5.6.0+dfsg1-4+deb8u2.dsc
4c3f1adde69b0df895d38fc4e95bfc9eabcbc8bf 22408 activemq_5.6.0+dfsg1-4+deb8u2.debian.tar.xz
a13b5e725f7ac288b840c1fdd322b6cf88afaffb 3588878 libactivemq-java_5.6.0+dfsg1-4+deb8u2_all.deb
0c153cb60152e0107a90dcd32810d3edc41cb492 3500488 libactivemq-java-doc_5.6.0+dfsg1-4+deb8u2_all.deb
0e109048e85765593f4b4bc221d96d441b9a67c3 49442 activemq_5.6.0+dfsg1-4+deb8u2_all.deb
Checksums-Sha256:
750edc31ddb34cf3d5d16c7f103818f03d706deb84375ec2349fc48fac70c4e8 3508 activemq_5.6.0+dfsg1-4+deb8u2.dsc
8ba0476ed158357643fe26e6869aa07766509436bac786db52b33dea0bf4897d 22408 activemq_5.6.0+dfsg1-4+deb8u2.debian.tar.xz
40909c5c9c1f52999b155557bee6cb4ca6f9961c79199fc43ec391f8cf50f3c3 3588878 libactivemq-java_5.6.0+dfsg1-4+deb8u2_all.deb
7b6835cd85dbc6efb203ed67ec8a0f3ae2933210dc5616769cc30dcef70b550a 3500488 libactivemq-java-doc_5.6.0+dfsg1-4+deb8u2_all.deb
01e12c90c97406cb538bb7e24a5a5de9634bd966affe39d3a68d5d885548f37b 49442 activemq_5.6.0+dfsg1-4+deb8u2_all.deb
Files:
19d02aa7c61838fe62953d9df6386c1d 3508 java optional activemq_5.6.0+dfsg1-4+deb8u2.dsc
d385e5a73741893c5c3c941c2fb7d523 22408 java optional activemq_5.6.0+dfsg1-4+deb8u2.debian.tar.xz
d7e229fff8976c4cac51a48cfccda2f5 3588878 java optional libactivemq-java_5.6.0+dfsg1-4+deb8u2_all.deb
dbfac0ee39a199134a99344a1ae5311f 3500488 doc optional libactivemq-java-doc_5.6.0+dfsg1-4+deb8u2_all.deb
bea7cd721c5310c72ce96c6c46e2b471 49442 java optional activemq_5.6.0+dfsg1-4+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=TWuh
-----END PGP SIGNATURE-----