Accepted libgoogle-gson-java 2.8.5-3+deb10u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 7 Sep 2022 09:53:49 CEST
Source: libgoogle-gson-java
Architecture: source
Version: 2.8.5-3+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
1130adf8d3c319e65cb251bd2be64f76fd66e64b 2353 libgoogle-gson-java_2.8.5-3+deb10u1.dsc
eec1e76a3f3888a34806bc9ef4b3268509ba8b79 315920 libgoogle-gson-java_2.8.5.orig.tar.xz
26aaa7ecefd23fdd9fe29b33db93837de3be859a 6180 libgoogle-gson-java_2.8.5-3+deb10u1.debian.tar.xz
bd747939500d4e3fd950b7008c3a2f562946d67a 16130 libgoogle-gson-java_2.8.5-3+deb10u1_amd64.buildinfo
Checksums-Sha256:
533ce4a98e99b8968cf8dcca74f60bfbaf0883bf70d8fac0cfebf9d19db225e4 2353 libgoogle-gson-java_2.8.5-3+deb10u1.dsc
26e5df7fd48d5918f6d6961b3b065c2908444dc865ad6de87ad0d1986fc464c8 315920 libgoogle-gson-java_2.8.5.orig.tar.xz
260dfe4c63097ca705ee9219b7a1a971fd3c90db9d1943c24cc58a953590b98d 6180 libgoogle-gson-java_2.8.5-3+deb10u1.debian.tar.xz
a04fc1360f9f44accb1632483f22f865eca274e0012bd25227c7e6f49e0e9278 16130 libgoogle-gson-java_2.8.5-3+deb10u1_amd64.buildinfo
Changes:
libgoogle-gson-java (2.8.5-3+deb10u1) buster-security; urgency=high
.
* Team upload.
* CVE-2022-25647: A flaw was found in gson, which is vulnerable to
Deserialization of Untrusted Data via the writeReplace() method in internal
classes. This issue may lead to denial of service attacks.
Files:
cd47d9fb10965f10bb152f2dff928cef 2353 java optional libgoogle-gson-java_2.8.5-3+deb10u1.dsc
b1c552cb28516fba50e21a49d78ee8e0 315920 java optional libgoogle-gson-java_2.8.5.orig.tar.xz
e31715a00db2ca6b8721148e3cb4ecc4 6180 java optional libgoogle-gson-java_2.8.5-3+deb10u1.debian.tar.xz
1b6ecbbf0b97a2cf36b5290e48f11243 16130 java optional libgoogle-gson-java_2.8.5-3+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Bpp2
-----END PGP SIGNATURE-----
Reply to: