libcommons-fileupload-java_1.6.0-1_source.changes ACCEPTED into unstable

Debian FTP Masters ftpmaster at ftp-master.debian.org
Thu Oct 22 13:50:28 BST 2026


Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Oct 2026 12:37:13 +0200
Source: libcommons-fileupload-java
Architecture: source
Version: 1.6.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg at apache.org>
Closes: 1108120
Changes:
 libcommons-fileupload-java (1.6.0-1) unstable; urgency=medium
 .
   * New upstream release
     - Fixes CVE-2025-48976: allocation of resources for multipart headers
       with insufficient limits (Closes: #1108120)
     - Refreshed the patches
   * Standards-Version updated to 4.7.4
   * Removed the Files-Excluded field, no longer needed
   * Converted debian/watch to the version 5 format
   * Removed the libcommons-fileupload-java-doc package
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
Checksums-Sha1:
 7b481e8f545558a0358492acd1ff1a948e5de9b2 2274 libcommons-fileupload-java_1.6.0-1.dsc
 b999ecc1430e42570b684dd081b0faf643609c1a 115692 libcommons-fileupload-java_1.6.0.orig.tar.xz
 f20e76b319ef76540ad195f62dc34069012ee009 7380 libcommons-fileupload-java_1.6.0-1.debian.tar.xz
 1139fe20c91df8f9603db70c6f3ac86a5c8aebdb 15111 libcommons-fileupload-java_1.6.0-1_source.buildinfo
Checksums-Sha256:
 0b06a884537cc91876840c6e4c9b86cd7e0e50497162828e26b85c51fc861303 2274 libcommons-fileupload-java_1.6.0-1.dsc
 501cc53fe2cc50ac8524e908e1899afe1b67165c04b84e56103ca1ba7a5f49f5 115692 libcommons-fileupload-java_1.6.0.orig.tar.xz
 a57732b18bee21c52487aecec71d4d569eb0b7b79217c4822c5021f34c670121 7380 libcommons-fileupload-java_1.6.0-1.debian.tar.xz
 8abcac111d3247a98232ed2dd65f35a89858115c9f40f9792d5665aecba47c9c 15111 libcommons-fileupload-java_1.6.0-1_source.buildinfo
Files:
 742f6e41e714fd8ee6456db65f7bbe99 2274 java optional libcommons-fileupload-java_1.6.0-1.dsc
 b0cc61308d3b17f3bcbd433693282fc9 115692 java optional libcommons-fileupload-java_1.6.0.orig.tar.xz
 f7c83ecea6c7900691b2411701f7f4c2 7380 java optional libcommons-fileupload-java_1.6.0-1.debian.tar.xz
 a9eebf382a7931a8ba4e838f1264f93a 15111 java optional libcommons-fileupload-java_1.6.0-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=bkat
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20261022/ae7472ce/attachment.sig>


More information about the pkg-java-maintainers mailing list