Accepted guava-libraries 32.0.1-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted guava-libraries 32.0.1-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 24 Jun 2023 21:53:33 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: guava-libraries_32.0.1-1_source.changes
- Debian-source: guava-libraries
- Debian-suite: unstable
- Debian-version: 32.0.1-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=rpl0ceGJv8+foqpHYs1RbIqwrQ//YcrnXXDpgYBQ838=; b=o2AQ5X9aXtCwg4fZqtU3igT837 bcrCnYM6gTr4jt2mvvfhCjBRCPVzH2hPNswElXaTy7WrjjVHunEwMdMCc3aoznYCMoAh3IZ7RrAWC 6oV05KQMbGGMFG03eov+D3tr2khxw4tZEduD+30w/8o1BdCYxkfsrWCbmcLmI/yrFZ5YbsVdHyJqq Il1hCiKt2fJBQJihrXBQinYcnYyPi8frpYDr7K5C/HvIgG6hAKMF2s/oXO4N5pgdyGzjof/WYeKN+ aFPYyydxzYAqYntkEHEFi/ChzzzsrIdvdDjJRXdQPySjcDXqmZXFzVodiqRgXVWo1vIqHIapau1By 6YWA5TYQ==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1qDBCH-007Q2s-Ld@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Jun 2023 22:27:47 -0700
Source: guava-libraries
Architecture: source
Version: 32.0.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: tony mancill <tmancill@debian.org>
Closes: 1038979
Changes:
guava-libraries (32.0.1-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 32.0.1 (Closes: #1038979)
Addresses insecure temp directory creation
See: CVE-2020-8908 CVE-2023-2976
* Bump Standards-Version to 4.6.2 (no changes)
* Freshen years in debian/copyright
* Remove 04-source-encoding.patch; applied upstream
* Refresh remaining patches for upstream 32.0.1
* Ignore com.google.errorprone:error_prone_core
* Patch out reference to com.google.errorprone:error_prone_core
* Remove get-orig-source target from debian/rules
* Update debian/rules to use DEB_VERSION_UPSTREAM
* Update debian/watch to use xz compression
Checksums-Sha1:
fec1e58c6c7fb5d84b2a7665be5b4ced2cc25cac 2349 guava-libraries_32.0.1-1.dsc
20a51cf8dec261ba1d87c0b7672de10fa69132c8 3410548 guava-libraries_32.0.1.orig.tar.xz
2cba0b628cb713e93fcdfe79298fd9f895b4d399 21844 guava-libraries_32.0.1-1.debian.tar.xz
26c10349547df24f55f06ac9badd971c41a8f3b4 14814 guava-libraries_32.0.1-1_amd64.buildinfo
Checksums-Sha256:
8e5048b5406ffdf17fe32860b2bea7bd5fe28c99285cd2ff11c2fa326987c0ac 2349 guava-libraries_32.0.1-1.dsc
9fe8fb149a2e9a0e24de658fb094767182593e64e21ba00556bc53ee35deae2c 3410548 guava-libraries_32.0.1.orig.tar.xz
d36dd6df68408648b541ae2ae14a79bea227700ab9293b3465e85d4a39c60c29 21844 guava-libraries_32.0.1-1.debian.tar.xz
d90cc979e95c8949e9810e206cdfb5f9137e9a6db6263aa58d7b538b00711c21 14814 guava-libraries_32.0.1-1_amd64.buildinfo
Files:
ee6bbcc2afb419bf9ea902841f28a40d 2349 java optional guava-libraries_32.0.1-1.dsc
fb2aed9a2c52b7f546539beb4675eeed 3410548 java optional guava-libraries_32.0.1.orig.tar.xz
48678299cdd8b992798f354d83628c2d 21844 java optional guava-libraries_32.0.1-1.debian.tar.xz
e709e5c8022647497524ad0b0e696fc6 14814 java optional guava-libraries_32.0.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=KF/M
-----END PGP SIGNATURE-----