• Accepted libhibernate3-java 3.6.10.Final-9+deb10u1 (source) into propos

    From Debian FTP Masters@21:1/5 to All on Fri Apr 30 18:50:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Wed, 21 Apr 2021 14:51:39 +0200
    Source: libhibernate3-java
    Architecture: source
    Version: 3.6.10.Final-9+deb10u1
    Distribution: buster-security
    Urgency: high
    Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
    Changed-By: Markus Koschany <apo@debian.org>
    Changes:
    libhibernate3-java (3.6.10.Final-9+deb10u1) buster-security; urgency=high
    .
    * Team upload.
    * Fix CVE-2020-25638:
    A flaw was found in hibernate-core. A SQL injection in the implementation
    of the JPA Criteria API can permit unsanitized literals when a literal is
    used in the SQL comments of the query. This flaw could allow an attacker to
    access unauthorized information or possibly conduct further attacks. The
    highest threat from this vulnerability is to data confidentiality and
    integrity.
    Checksums-Sha1:
    e6bcc15833713d4c434e78a3a44d078c56d2cf9b 2941 libhibernate3-java_3.6.10.Final-9+deb10u1.dsc
    c06bac1c1aad0219391b93d115eb85a191740c01 11164 libhibernate3-java_3.6.10.Final-9+deb10u1.debian.tar.xz
    f55362a591c4bbb824199547904c6be05c7453bf 13673 libhibernate3-java_3.6.10.Final-9+deb10u1_amd64.buildinfo
    Checksums-Sha256:
    2caee4966557a81d7f8892cbd288bb01c0bc107e01837a0ad2c138dfbada2452 2941 libhibernate3-java_3.6.10.Final-9+deb10u1.dsc
    405b82c185fec8ec3d6be6fabb01972c3d5a4527221048be34ab67bc59a6bbd2 11164 libhibernate3-java_3.6.10.Final-9+deb10u1.debian.tar.xz
    d9c0c1322cc06962a40bc05c4c250f1239169dad71c4b79ca9495033a5d9d9db 13673 libhibernate3-java_3.6.10.Final-9+deb10u1_amd64.buildinfo
    Files:
    a699cc97dcc7b9f39b29772c30102f13 2941 java optional libhibernate3-java_3.6.10.Final-9+deb10u1.dsc
    e01e6d38c5a1ca8bf2b24315deb73a55 11164 java optional libhibernate3-java_3.6.10.Final-9+deb10u1.debian.tar.xz
    2f29781cffb79fe6c137f4b26b76cee9 13673 java optional libhibernate3-java_3.6.10.Final-9+deb10u1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmCGkqlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk4boP/j1PUp2FK8CAEpL/7mYvzVuFqpa9JiZjbyuE 4HEzVqBBHxF+YIpo1GVxHVoNRgMdA/SrJlv2ctxqPWKU+NRMeXNKtnWXdr6yReRw MxXqU5eT5tx+4a6bqWVCmPbA37hd7m5697eH5b7iEr/dpfnMP+a9yI2XRJ+xsPAy Fa42NCupFb6COqDJLeLbUF6eeuBf/0fP01nEcuTEzQIbVUIaX9btRMGydtmRa2GF HGGNAbMD8LUK/hossaRrAuN4F5NSuY+m29rO/mOalobJPS3mXQEvsTe+28zIMFUd LO571kHCKyJIOa7oa2ATP6nw2yrI+WSkpBfhxlLn3684BwTTGGdS+Ng678BtCIIX 0Bytww3Ex+p+1PLcXnDeqA0sGydBEcbi/H9gcjHzcTmULPt5ic+hzyYoW06o2rkC EVY+KTnWkHEuuISiLPG30FDWc0I+acFrWQZucpBn5bjmw3Wh/JCXzyEeDZC/ln5b KeKvZnQ2H/7eYi9yWzI6i2fu183esaBfOJ53nn52A8Ucb0upXRiBikkjRl1ioYGX jbcC/iXEfUN8BGphqwHr+O5PLliLM9l2oRDU3csAXWAZlow7w3HmMJUorJqBpTav zW0XZ1gQ7ioM0UTL9ywNopyUEiOMENEoja++z2E7WH+x+xN+a36+xx3c3NCTBg1j
    kXS4PnAp
    =Av4v
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)