Accepted libxstream-java 1.4.2-1+deb7u1 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 06 Jun 2016 10:42:18 +0200
Source: libxstream-java
Binary: libxstream-java
Architecture: source all
Version: 1.4.2-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libxstream-java - Java library to serialize objects to XML and back again
Closes: 819455
Changes:
libxstream-java (1.4.2-1+deb7u1) wheezy-security; urgency=high
.
* Team upload.
.
[ Emmanuel Bourg ]
* Security update:
- CVE-2016-3674: XML external entity injection vulnerability
(Closes: #819455)
Checksums-Sha1:
7eb2236177b7b13cbdb3743cfc59ca3e1339fa3d 2446 libxstream-java_1.4.2-1+deb7u1.dsc
6b729a3ab509e6508573140ea4dbf273f9fee72e 486666 libxstream-java_1.4.2.orig.tar.gz
fece4cd49eef246566c5d2f5862ec8492d5f14d3 8223 libxstream-java_1.4.2-1+deb7u1.debian.tar.gz
87130adb4eddb584e68ed8cda5404ebfedf1f41c 556500 libxstream-java_1.4.2-1+deb7u1_all.deb
Checksums-Sha256:
69e37bc7ced210fb6127d6d20abd01d4975ef421dcca43b8a9ea2cda073abeee 2446 libxstream-java_1.4.2-1+deb7u1.dsc
af651ed20251fec8c8e4178152ec522f2dc59163f3b86a3204863e374e35d97c 486666 libxstream-java_1.4.2.orig.tar.gz
4d4a0f3cb86c279a42a49a028789f342d0ae0eb90388dbcb0f277cebad21ccd5 8223 libxstream-java_1.4.2-1+deb7u1.debian.tar.gz
1a6718a90fc942bf8bacc397ffb04b1c6598d136f8935174dc585c43ef0aff3e 556500 libxstream-java_1.4.2-1+deb7u1_all.deb
Files:
cd7f1519dd9cfe12b1c2b3c3e4fb634c 2446 java optional libxstream-java_1.4.2-1+deb7u1.dsc
c7a8a572cd3b960f8571e1aeff69f85d 486666 java optional libxstream-java_1.4.2.orig.tar.gz
5a0e8e3835cf34669ee34bcc43a05bb5 8223 java optional libxstream-java_1.4.2-1+deb7u1.debian.tar.gz
1c38b7d5dba44c7297c73cb8364ba7e0 556500 java optional libxstream-java_1.4.2-1+deb7u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=hM98
-----END PGP SIGNATURE-----
Reply to: