Accepted groovy 1.8.6-4+deb8u2 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 30 Jan 2017 17:20:04 +0100
Source: groovy
Binary: groovy groovy-doc
Architecture: source all
Version: 1.8.6-4+deb8u2
Distribution: jessie
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
groovy - Agile dynamic language for the Java Virtual Machine
groovy-doc - Agile dynamic language for the Java Virtual Machine (documentatio
Changes:
groovy (1.8.6-4+deb8u2) jessie; urgency=medium
.
* Team upload.
* Fix CVE-2016-6814:
It was found that a flaw in Apache Groovy, a dynamic language for the Java
Virtual Machine, allows remote code execution wherever deserialization
occurs in the application. It is possible for an attacker to craft a
special serialized object that will execute code directly when
deserialized. All applications which rely on serialization and do not
isolate the code which deserializes objects are subject to this
vulnerability.
Checksums-Sha1:
48a2d1fab1b406bbef341f9af1ef79265610ca44 2634 groovy_1.8.6-4+deb8u2.dsc
e1a670ddff14b6d5306d14ee0f22a22d573fbad6 15328 groovy_1.8.6-4+deb8u2.debian.tar.xz
2d6f71a050b94c2eb81104427448a5133c71505b 9729194 groovy_1.8.6-4+deb8u2_all.deb
cabc37815fb2b3da022fd4402337e5816915afd2 2440660 groovy-doc_1.8.6-4+deb8u2_all.deb
Checksums-Sha256:
e54ef0c358d71c2fa745b485bdd46b9ad5e0b206b6bed197c7d59b685a28c038 2634 groovy_1.8.6-4+deb8u2.dsc
8a0c96ab12a8b3c4f8f846cf7d2e71cc439465d8a54eb8e3a3f121f37f6b411e 15328 groovy_1.8.6-4+deb8u2.debian.tar.xz
c3596f3a1b8df06fbb214e9a9a69f4a8953d33295b65c03d9a7b749083cf93e9 9729194 groovy_1.8.6-4+deb8u2_all.deb
8baba40939cf92c28bcf45bcb23c427ccd79e543399a6cabf1867265139cc826 2440660 groovy-doc_1.8.6-4+deb8u2_all.deb
Files:
c7a79603f8e901ae120217091e8c6ba1 2634 java optional groovy_1.8.6-4+deb8u2.dsc
e68138b4c31289d127af0b11e09a02a1 15328 java optional groovy_1.8.6-4+deb8u2.debian.tar.xz
c1a5d57458960daab77ea1d04b95bf79 9729194 java optional groovy_1.8.6-4+deb8u2_all.deb
762621ec4b2b302602a731aeafd48d32 2440660 doc optional groovy-doc_1.8.6-4+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAliqPitfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkCRQP/A5auTT5THu7IWbTZrRbIEjvZXJJDAhMXeiD
A7Xf8FpnQGdD5jEq2m2RIub9fWoEhVkCfkmolQUIK3Kfg5vMUNzUpr4kqMLddgsl
+ptgBUCIRuXGHlS2IcNOXMDsWLyUxW/XBZ+mAVSmnnxnC1RbubLqVdMEhnAuROJ5
0L/Z0jvwemQTpJ4fMSaJPWWxRx8fk7V4FlWsBB5s+ra6nJZnqg7/SiPTH8zhF+Uk
eZUlytsYr1THBG4TfvWKl491Wh0bD7YpRZyTWiBoqKxbTguYl3hwE5v6KZhX5hyZ
j2aGZoMGZKHocKsSQ9q2zwkX0rQCZQTCdUdXAkjqJ4k3c2x1sTGqFydegopNIGWK
RnUSwt0+pMShdNNB66ycrXwvuRkXSfFqwiUn1DRqzo3Tn774x09GgGOk2rPfWTP/
8e5EC10PLqUbhkV5tZRrzz08lx7QALIy4Z3MopahsfAnebF2zpyZgGm+csC57LsJ
MPtzdhK9IY8kCzgM/D0h2f70Ssb2gutQj/5Q4JPsUYEhIgWxpi/eymuj+hIF/kik
NSRBVh1/cXbRQ2T1rVhjxkv5V5NuxpzLMttY4HthdD5WQU7k8U6GEWj1dvOB6S5I
TTXZmQBm4pBdZm0UmqAtE+lDdJUmbph8mHqROjiFq8HYoWe5WqFypHMtSU2t+Ir4
GuXdYnCr
=YmTv
-----END PGP SIGNATURE-----