Format: 1.8
Date: Tue, 17 Oct 2023 01:00:51 +0200
Source: axis
Binary: libaxis-java libaxis-java-doc
Built-For-Profiles: noudeb
Architecture: all
Version: 1.4-29
Distribution: noble-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos03-amd64-020.buildd>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 libaxis-java - SOAP implementation in Java
 libaxis-java-doc - SOAP implementation in Java (documentation)
Closes: 1051288
Changes:
 axis (1.4-29) unstable; urgency=medium
 .
   * Team upload.
   * Fix CVE-2023-40743:
     When integrating Apache Axis 1.x in an application, it may not have been
     obvious that looking up a service through "ServiceFactory.getService"
     allows potentially dangerous lookup mechanisms such as LDAP. When passing
     untrusted input to this API method, this could expose the application to
     DoS, SSRF and even attacks leading to RCE. (Closes: #1051288)
   * Switch to debhelper-compat = 13.
   * Declare compliance with Debian Policy 4.6.2.
Checksums-Sha1:
 d0cef69280b7a4bf588cb5d8f1e943fb14ee9f1b 10390 axis_1.4-29_amd64.buildinfo
 d02820c1922ab24d862f77e8d9787d678c30b433 1053740 libaxis-java-doc_1.4-29_all.deb
 199e52062e036c00cf74855a464054e02a36be22 1498516 libaxis-java_1.4-29_all.deb
Checksums-Sha256:
 4793d2c129ac61705e3d5ea8da79f7da76f0c70beb9cd16d3175b73251a80137 10390 axis_1.4-29_amd64.buildinfo
 bb12e9e349b40774b50eb48edb829c21590a9586ac24f49d9d7a063eacbc45aa 1053740 libaxis-java-doc_1.4-29_all.deb
 370744dd052eacdbc5c5ccf638df460e61ad97b738213695d3d052cb86caec1a 1498516 libaxis-java_1.4-29_all.deb
Files:
 1caef04f5d66b4d8ad72c8d6011a0234 10390 java optional axis_1.4-29_amd64.buildinfo
 21406b62e38205d41168321d82eb951b 1053740 doc optional libaxis-java-doc_1.4-29_all.deb
 42790b3b751fa1244c409bbf0d5030d4 1498516 java optional libaxis-java_1.4-29_all.deb