Accepted libxstream-java 1.4.14-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 19 Nov 2020 20:46:52 +0100
Source: libxstream-java
Architecture: source
Version: 1.4.14-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Changes:
libxstream-java (1.4.14-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 1.4.14.
- Fix CVE-2020-26217: may allow a remote attacker to run arbitrary shell
commands only by manipulating the processed input stream.
* Switch to debhelper-compat = 13.
* Declare compliance with Debian Policy 4.5.1.
* Ignore org.apache.maven.plugins:maven-antrun-plugin:jar.
Checksums-Sha1:
2d1d7dadd7671b45dcb2f24bb5d83f1e104061c1 2520 libxstream-java_1.4.14-1.dsc
205508d0faa0d64090f49e1d5a5c65502bb64e68 450524 libxstream-java_1.4.14.orig.tar.xz
be0850cc330df57c6678ef0ebc4c5f576b9e0f4e 6980 libxstream-java_1.4.14-1.debian.tar.xz
18f06ac40f96e4428338557da6a7f18beaf941c2 16161 libxstream-java_1.4.14-1_amd64.buildinfo
Checksums-Sha256:
93de3c71301a37c9bd1551502c110d937047b75c422eb06480497ac15c4139f8 2520 libxstream-java_1.4.14-1.dsc
85aeeecdd812b43c676a79ca19414299fea069f9a7eb97c4bc5c0f3f7593d875 450524 libxstream-java_1.4.14.orig.tar.xz
cb3387ec1712c9e6b7a18feb68b5cd6e0512ee817b214fca31f286ec1d2d4287 6980 libxstream-java_1.4.14-1.debian.tar.xz
e705835a151caf45616cdfdc1b7d9b77d97f6334af8ac293ef960970d2f70859 16161 libxstream-java_1.4.14-1_amd64.buildinfo
Files:
fbeaee3d8c84ae67ad0346809df9ac13 2520 java optional libxstream-java_1.4.14-1.dsc
7460995f89b3f617e79fa14a6cbdb259 450524 java optional libxstream-java_1.4.14.orig.tar.xz
c41a6a89a2a259e87aa1c2492973120d 6980 java optional libxstream-java_1.4.14-1.debian.tar.xz
a1fd297f4c8560b56a8f5eedb6956fa0 16161 java optional libxstream-java_1.4.14-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=c01B
-----END PGP SIGNATURE-----