Accepted checkstyle 5.9-1+deb8u2 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 10 Feb 2020 12:37:58 +0100
Source: checkstyle
Binary: checkstyle checkstyle-doc
Architecture: source all
Version: 5.9-1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
checkstyle - checks Java source against a coding standard
checkstyle-doc - Documentation for Checkstyle
Changes:
checkstyle (5.9-1+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2019-10782:
Security researchers from Snyk discovered that the fix for CVE-2019-9658
was incomplete. Checkstyle, a development tool to help programmers write
Java code that adheres to a coding standard, was still vulnerable to XML
External Entity (XXE) injection.
Checksums-Sha1:
73faca44632a6f9506d1bacb1a38413e88e2c79f 2630 checkstyle_5.9-1+deb8u2.dsc
938a7761a2e5d19ad838ed074b2df84011d09b5e 9648 checkstyle_5.9-1+deb8u2.debian.tar.xz
a80c6c6c1776a112fea2a60e45229a2af9509fcb 648676 checkstyle_5.9-1+deb8u2_all.deb
da8e41dc1c84a4686ca104b393c31ad85b105a21 857566 checkstyle-doc_5.9-1+deb8u2_all.deb
Checksums-Sha256:
d0b92a4889e130a8f78b21f24036f5369449a4a2e6dd9bc69a8a10abda0a60e0 2630 checkstyle_5.9-1+deb8u2.dsc
3ab52599104790d0932df15991a20069aa7444cda2919468c35b21d71b5c859b 9648 checkstyle_5.9-1+deb8u2.debian.tar.xz
2b43759393c87bc1af2374a50c5db121b74bd6362424c4784b22de7a79015255 648676 checkstyle_5.9-1+deb8u2_all.deb
d1552c90b6993425679aecb83b1b1f35fd2dd353c72cfe4016b4fa4e569a2019 857566 checkstyle-doc_5.9-1+deb8u2_all.deb
Files:
3ede8501de693422fecc8c126302cb14 2630 java optional checkstyle_5.9-1+deb8u2.dsc
f6166b5953602a2c43f7ea98d2ec1d5b 9648 java optional checkstyle_5.9-1+deb8u2.debian.tar.xz
cc410eb0c1777d19f1deed846e4cb355 648676 java optional checkstyle_5.9-1+deb8u2_all.deb
7ffe12c8c1f8accfa5ca4d95fabfc33f 857566 doc optional checkstyle-doc_5.9-1+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----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=JK5D
-----END PGP SIGNATURE-----