libxstream-java 1.4.19-1 source package in Ubuntu
Changelog
libxstream-java (1.4.19-1) unstable; urgency=medium * New upstream release - Fixes CVE-2021-43859: Denial of Service when unmarshalling highly recursive collections or maps * Standards-Version updated to 4.6.1 -- Emmanuel Bourg <email address hidden> Wed, 25 May 2022 09:11:51 +0200
Upload details
- Uploaded by:
- Debian Java Maintainers
- Uploaded to:
- Sid
- Original maintainer:
- Debian Java Maintainers
- Architectures:
- all
- Section:
- java
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
libxstream-java_1.4.19-1.dsc | 2.3 KiB | e26452eae1a857e5366b2ae7b0de0c34419b749a9d0ab84b812157aa892de0af |
libxstream-java_1.4.19.orig.tar.xz | 463.1 KiB | 7bc71cb4d421c6270a1824aa617c14b29b46cfef27ab924855f94f1674632628 |
libxstream-java_1.4.19-1.debian.tar.xz | 17.6 KiB | 7724f4d8216b1a1fa7c2b20f9b060ec0d28a160edd936abb47a9b510222af7d3 |
Available diffs
- diff from 1.4.18-2 to 1.4.19-1 (24.6 KiB)
No changes file available.
Binary packages built by this source
- libxstream-java: Java library to serialize objects to XML and back again
The features of the XStream library are:
.
- Ease of use. A high level facade is supplied that simplifies common
use cases.
- No mappings required. Most objects can be serialized without need
for specifying mappings.
- Performance. Speed and low memory footprint are a crucial part of
the design, making it suitable for large object graphs or systems
with high message throughput.
- Clean XML. No information is duplicated that can be obtained via
reflection. This results in XML that is easier to read for humans
and more compact than native Java serialization.
- Requires no modifications to objects. Serializes internal fields,
including private and final. Supports non-public and inner classes.
Classes are not required to have default constructor.
- Full object graph support. Duplicate references encountered in the
object-model will be maintained. Supports circular references.
- Integrates with other XML APIs. By implementing an interface,
XStream can serialize directly to/from any tree structure (not just
XML).
- Customizable conversion strategies. Strategies can be registered
allowing customization of how particular types are represented as
XML.
- Error messages. When an exception occurs due to malformed XML,
detailed diagnostics are provided to help isolate and fix the
problem.
- Alternative output format. The modular design allows other output
formats. XStream ships currently with JSON support and morphing.