-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 22 Dec 2024 10:12:11 +0000
Source: libxstream-java
Binary: libxstream-java
Architecture: all
Version: 1.4.20-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Description:
 libxstream-java - Java library to serialize objects to XML and back again
Closes: 1087274
Changes:
 libxstream-java (1.4.20-1+deb12u1) bookworm; urgency=medium
 .
   * Team upload
   * Fix CVE-2024-47072: XStream is vulnerable to a
     Denial of Service attack due to stack overflow
     from a manipulated binary input stream.
     (Closes: #1087274)
Checksums-Sha1:
 444d49ac542a03bd41cd0e6628d61c14c2c03b26 17445 libxstream-java_1.4.20-1+deb12u1_all-buildd.buildinfo
 1ee21072d8441383e3a23fe5a9e15a31063ddb84 565244 libxstream-java_1.4.20-1+deb12u1_all.deb
Checksums-Sha256:
 a28e872ca01f74a2234e408d7a95f2e311ca60026cb60a5d542aa964aa614102 17445 libxstream-java_1.4.20-1+deb12u1_all-buildd.buildinfo
 202cb87bdc8f3f1cd406c2139be8ca34583313dc21ede7786246114b233a07ab 565244 libxstream-java_1.4.20-1+deb12u1_all.deb
Files:
 784c016d33ee939c2aaaf12468615a98 17445 java optional libxstream-java_1.4.20-1+deb12u1_all-buildd.buildinfo
 b2d0006b32f193398e5681f0049e955d 565244 java optional libxstream-java_1.4.20-1+deb12u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=kLWZ
-----END PGP SIGNATURE-----