-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 01 May 2017 09:39:36 +0100 Source: libxstream-java Binary: libxstream-java Architecture: source all Version: 1.4.2-1+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintain...@lists.alioth.debian.org> Changed-By: Chris Lamb <la...@debian.org> Description: libxstream-java - Java library to serialize objects to XML and back again Closes: 861521 Changes: libxstream-java (1.4.2-1+deb7u2) wheezy-security; urgency=high . * CVE-2016-7957: Prevent a remote application crash due to mishandled attempts to create an instance of the primitive type 'void' during unmarshalling. (Closes: #861521) Checksums-Sha1: 7b25c325ec8304dd27930ee55ce17868387e889e 2330 libxstream-java_1.4.2-1+deb7u2.dsc 6b729a3ab509e6508573140ea4dbf273f9fee72e 486666 libxstream-java_1.4.2.orig.tar.gz 408d7f8a6d7f3fadb59f5198009cf2bb97bd9cc4 8177 libxstream-java_1.4.2-1+deb7u2.debian.tar.gz bbd24f3a64f68b55c114a2fd6beef499a0a1f84d 556446 libxstream-java_1.4.2-1+deb7u2_all.deb Checksums-Sha256: b1012399d90b8ca5188392a73cc35d70b87f69e3d7e9230a4a7b8a5081e5e705 2330 libxstream-java_1.4.2-1+deb7u2.dsc af651ed20251fec8c8e4178152ec522f2dc59163f3b86a3204863e374e35d97c 486666 libxstream-java_1.4.2.orig.tar.gz 662d92ef39bef3439f45ce8983b130b84afbe105a1a1a7ee5b777f75ac450dc2 8177 libxstream-java_1.4.2-1+deb7u2.debian.tar.gz 23a32751924f5d6bdd3691f885cb428d081ae6e487eca3fabcc582c87c6e0370 556446 libxstream-java_1.4.2-1+deb7u2_all.deb Files: 727523577a2ccc33e1439624e4094857 2330 java optional libxstream-java_1.4.2-1+deb7u2.dsc c7a8a572cd3b960f8571e1aeff69f85d 486666 java optional libxstream-java_1.4.2.orig.tar.gz 23174e02b8090163d77aa101b07b8809 8177 java optional libxstream-java_1.4.2-1+deb7u2.debian.tar.gz 9610b92b637876ab02710748a9798a80 556446 java optional libxstream-java_1.4.2-1+deb7u2_all.deb
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlkG+HcACgkQHpU+J9Qx Hlg4qg/9HbulKsAIYTEy/zQ7iPEzKu53FAll9XiMrCU/i98YsgQDJnaQvxLy51O/ ffl13laUlNDXz/Fla7bPhrN97nYi6RZJJxIaOfB1KfB2UYmY8EbWsied6BfJ1q6C p9G7xcPA2l6ysSZ8w2MNd91TkHJUN6EzxW91Qo00F3D1cjaaErCtCSAjCErhtzFM ha/VNdZU4CF1SaHW3r24md3+uWMgCYehab5yh2BL6VhfcdoC7PCHzQtmf9Dqr/Ms x4kN3Yof2XnaIGA1IFNNJ3JBOgD+CfruiirDBaiIpOB4WJ2pYqW6n8KUbVdugAUY m1lMxQXfcgMYzUKDF73HCrw9QvG0dYJ1byUtW0XJZCogG8f9Eib2u15HfDxxaDL3 8rjuWu8vtJKkSuCyrqdb9pSUZf9wrjnrV7Wv/OQL2z7EuNTXlqiCNdqgeqVptd6x J3brfr8AzftfLSAefmFi4tP9ycFIreQVbiQ6XEH1EEqdh77qdepzYRl7qxyST55l Ob0ZvdECkoXhE1lmOCKLCqDVDViSnI/9au7WChpNK6WqxWPb+GLozv2F3yFA/LK1 3vXJ3PtIAk1sUi4AGi458Ici0IZEnByfZHGl1d8rdA8TjCl07zmrUXL1UyWUBo/F AmSfmmEkRDQpb2XT+Ici6JzHoyPsDxSooQ+PvJvLXirqCV8BCOM= =jLZ9 -----END PGP SIGNATURE-----