Accepted maven-shared-utils 3.0.0-1+deb9u1 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 26 Jun 2022 20:53:36 CEST
Source: maven-shared-utils
Binary: libmaven-shared-utils-java libmaven-shared-utils-java-doc
Architecture: source
Version: 3.0.0-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libmaven-shared-utils-java - Replacement for plexus-utils in Maven
libmaven-shared-utils-java-doc - Replacement for plexus-utils in Maven (documentation)
Checksums-Sha1:
fb53c1f01ca4a6cbf9e41c4e44e4627d43ac0cab 2579 maven-shared-utils_3.0.0-1+deb9u1.dsc
0c4f2ca8ba0fccd26ad207cf8623bb3cc6202658 117160 maven-shared-utils_3.0.0.orig.tar.xz
5a69117af02c979e261849c00103c860ef8dbb93 5872 maven-shared-utils_3.0.0-1+deb9u1.debian.tar.xz
7b8b1a3d2c63b5f58e717376c53ef70cb222a10a 16278 maven-shared-utils_3.0.0-1+deb9u1_amd64.buildinfo
Checksums-Sha256:
dbb2bfe08a4b255f2d9711835e970b5954c2cf5e2aca8c2457ade98274de360a 2579 maven-shared-utils_3.0.0-1+deb9u1.dsc
bfc0a4df7a77dbc7f76829fd17e6ac532cd086a5b2f1d84a25a7fcbcb147ea9c 117160 maven-shared-utils_3.0.0.orig.tar.xz
8c804348a3a813c19baca3c798772c91b05fcba95502d23e94920cf37b4429c2 5872 maven-shared-utils_3.0.0-1+deb9u1.debian.tar.xz
0608270a15c02868ac3a48fc263d5186517bbcfd83d15d3efd3f27fc7f8308df 16278 maven-shared-utils_3.0.0-1+deb9u1_amd64.buildinfo
Changes:
maven-shared-utils (3.0.0-1+deb9u1) stretch-security; urgency=high
.
* Team upload.
* Fix CVE-2022-29599: Apache Maven maven-shared-utils,
the Commandline class can emit double-quoted strings without proper
escaping, allowing shell injection attacks.
Files:
dc8fcce73678edfbf59f29182562bdd4 2579 java optional maven-shared-utils_3.0.0-1+deb9u1.dsc
51edf3ef9dc9c9068a8ebb1768e257ca 117160 java optional maven-shared-utils_3.0.0.orig.tar.xz
eb0796ac988197ec85fd92994f3ce2f2 5872 java optional maven-shared-utils_3.0.0-1+deb9u1.debian.tar.xz
5c843546d203e0c7cbdaf7af08c790bb 16278 java optional maven-shared-utils_3.0.0-1+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=mNqs
-----END PGP SIGNATURE-----
Reply to: