1. Forum
  2. Usenet
  3. LINUX.DEBIAN.DEVEL

  • Re: Accepted libxstream-java 1.4.20-1+deb12u1 (source) into proposed-up

    From John Homer@21:1/5 to ftpmaster@ftp-master.debian.org on Mon Jan 27 21:20:01 2025
    Please unsubscribe homerj@vt.edu from you list

    On Sat, Jan 4, 2025 at 12:47 PM Debian FTP Masters < ftpmaster@ftp-master.debian.org> wrote:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sun, 22 Dec 2024 10:12:11 +0000
    Source: libxstream-java
    Architecture: source
    Version: 1.4.20-1+deb12u1
    Distribution: bookworm
    Urgency: medium
    Maintainer: Debian Java Maintainers < pkg-java-maintainers@lists.alioth.debian.org>
    Changed-By: Bastien Roucariès <rouca@debian.org>
    Closes: 1087274
    Changes:
    libxstream-java (1.4.20-1+deb12u1) bookworm; urgency=medium
    .
    * Team upload
    * Fix CVE-2024-47072: XStream is vulnerable to a
    Denial of Service attack due to stack overflow
    from a manipulated binary input stream.
    (Closes: #1087274)
    Checksums-Sha1:
    101b17a73b3fd32dbc816a50f78a50910906e9b0 2429 libxstream-java_1.4.20-1+deb12u1.dsc
    6fe52860ba907e0b2e1cd5978bbe492797a1dad5 478604 libxstream-java_1.4.20.orig.tar.xz
    0a7ff0d6f69bc21f436ffe5466a789e1ca707fc6 19112 libxstream-java_1.4.20-1+deb12u1.debian.tar.xz
    2efead3c9e5d920b0cbeb6f168410a893c432c76 17750 libxstream-java_1.4.20-1+deb12u1_amd64.buildinfo
    Checksums-Sha256:
    87109b8afdcdacff7a93033041d0652e7f026eb0f04a6d5ad7d94e967da9504a 2429 libxstream-java_1.4.20-1+deb12u1.dsc
    79985cf8b48d63947f2958f76a4e0825320004ac5984347b47c4aec384ca3bd3 478604 libxstream-java_1.4.20.orig.tar.xz
    ec3817a1daf2d1c97f95b83d63b5573468e25e40dfe1b837e960211a7d120838 19112 libxstream-java_1.4.20-1+deb12u1.debian.tar.xz
    4b49372e9375b6cb07980a7f27c31c3ae70e3c5cd954f8ea4e15e92cc4a5b294 17750 libxstream-java_1.4.20-1+deb12u1_amd64.buildinfo
    Files:
    dac7cc6e1452c01ef6d11f79c9dc4a33 2429 java optional libxstream-java_1.4.20-1+deb12u1.dsc
    ee2f67ebf748cc711cf9c4707ff00773 478604 java optional libxstream-java_1.4.20.orig.tar.xz
    7cc02dca64e17bc2e17f162d101ad614 19112 java optional libxstream-java_1.4.20-1+deb12u1.debian.tar.xz
    fcd4042ef929aa747958c1d3b509dd1e 17750 java optional libxstream-java_1.4.20-1+deb12u1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQJFBAEBCgAvFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmd5QwIRHHJvdWNhQGRl Ymlhbi5vcmcACgkQADoaLapBCF/twRAAqlE6BajL5+zxyixOD+kGqF7QO1qcdT3l TURGZoKSGuovnUWnm9De44n2OLm1uJI8RfCemO5ZoaKI/tHA6Q05fnQStwWzXSHg lbrgu+1bIsSnsui0PsjDf7Eh1u6wX5EYhjAHuGezwZKjDXHQVTsMJ0bcHwNMcIG0 KrrD1sidmKYGXEWrMequ83UAiegqFR3Nv8RpsOk30GnnmfjbVavMzYA95FJGRmr1 zXG0ntgdWdSZGcg3RKd2Ruupq9Bsn1QRwKL79++XbKJr1D+oG6/0C5GdwKGCEfEF pZ9FreP3XyeG92S3CSfo4dWeidlHRaIljJKajXPz8Z6BN5jFeW8+AVItbaCaiIFc Q6avjM37Q4saDWL7tIJh1j/f0PuI00xzwDva2/TqDbtyDy6RlWQmzuOAjBGDjFX7 hOsxkIVwrVCIQSdJUJfvIVxGTmqlOnJFRD6/4rxJ1v4QG9Qct/NWI0wD614PC4d/ ckwhvP2Rhzi5lk4lIlmSSFvFIwq8lGHHGZ78omijeAdwRm5XwoVj4v3eH2vag95l p18xtHiZuYVxqSWVmyaEnAR96/g7uHffoxmB6VRO7QdKNyZSj/dnWGlLvDjB5eOJ jKizxny02eEX7l9Plrov/ac5bs5XQfaU5ILczTOnWMYdvRN0D6vhCR1HGfIJGFeF
    NRrVNdUwbHg=
    =DiZo
    -----END PGP SIGNATURE-----



    --
    *John E. Homer, Sr. Systems Engineer*
    Virginia Tech *|**(he/his/him)| *TLOS, Technology-enhanced Learning and
    Online Strategies
    751 University City Blvd
    Blacksburg, VA 24061
    540 231-9515 | homerj@vt.edu

    <div dir="ltr"><div class="gmail_default" style="font-size:small">Please unsubscribe <a href="mailto:homerj@vt.edu">homerj@vt.edu</a> from you list</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Sat,
    Jan 4, 2025 at 12:47 PM Debian FTP Masters &lt;<a href="mailto:ftpmaster@ftp-master.debian.org">ftpmaster@ftp-master.debian.org</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,
    204);padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
    Hash: SHA512<br>

    Format: 1.8<br>
    Date: Sun, 22 Dec 2024 10:12:11 +0000<br>
    Source: libxstream-java<br>
    Architecture: source<br>
    Version: 1.4.20-1+deb12u1<br>
    Distribution: bookworm<br>
    Urgency: medium<br>
    Maintainer: Debian
  • From Soren Stoutner@21:1/5 to All on Mon Jan 27 21:12:47 2025
    Copy: homerj@vt.edu (John Homer)

    This is a multi-part message in MIME format.

    --nextPart3534803.WBkqHH8m98
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/plain; charset="utf-8"

    You can unsubscribe yourself at:

    https://lists.debian.org/debian-devel/

    On Monday, January 27, 2025 1:13:51 PM MST John Homer wrote:
    Please unsubscribe homerj@vt.edu from you list

    --
    Soren Stoutner
    soren@debian.org

    --nextPart3534803.WBkqHH8m98
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/html; charset="utf-8"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">You can unsubscribe yourself at:</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">https://lists.debian.org/debian-devel/</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Monday, January 27, 2025 1:13:51 PM MST John Homer wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Please unsubscribe homerj@vt.edu from you list</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">-- </p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Soren Stoutner</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">soren@debian.org</p>