tag 826653 + pending thanks Some bugs in the shiro package are closed in revision 0c7b865f067809d1314205edcfb425165a6502fe in branch 'master' by Emmanuel Bourg
The full diff can be seen at https://anonscm.debian.org/cgit/pkg-java/shiro.git/commit/?id=0c7b865 Commit message: Marked CVE-2016-4437 as fixed (Closes: #826653)