libpdfbox2-java_2.0.24-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Aug 2021 00:05:48 +0200
Source: libpdfbox2-java
Architecture: source
Version: 2.0.24-1
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
Changed-By: Markus Koschany <apo at debian.org>
Closes: 991526
Changes:
 libpdfbox2-java (2.0.24-1) unstable; urgency=high
 .
   * New upstream version 2.0.24.
     - Fix CVE-2021-31811:
       In Apache PDFBox, a carefully crafted PDF file can trigger an
       OutOfMemory-Exception while loading the file. This issue affects Apache
       PDFBox version 2.0.23 and prior 2.0.x versions.
     - Fix CVE-2021-31812:
       In Apache PDFBox, a carefully crafted PDF file can trigger an infinite
       loop while loading the file. This issue affects Apache PDFBox version
       2.0.23 and prior 2.0.x versions.
       (Closes: #991526)
   * Remove debian/gbp.conf again until we reach a consensus in Debian how to
     maintain Git repositories.
   * Declare compliance with Debian Policy 4.6.0.
Checksums-Sha1:
 72f11ffdf71367b6c935ef3d9e47560ef8f74490 2560 libpdfbox2-java_2.0.24-1.dsc
 9c4e9be56f4cee564eb4ea5fd5a3527dce2edf10 10258128 libpdfbox2-java_2.0.24.orig.tar.xz
 ec01214fa39c9c417f8072280a62e9279a3f1965 10148 libpdfbox2-java_2.0.24-1.debian.tar.xz
 a10786a7bb722d145010e79853ff983bced08a41 16159 libpdfbox2-java_2.0.24-1_amd64.buildinfo
Checksums-Sha256:
 d00ef6506a05e07efcb29465707896cc306e9a0006f3458cb60b0273f942d842 2560 libpdfbox2-java_2.0.24-1.dsc
 68f66ddb789564a7f99be32556fc0b69dec7a760a0e83ce520a39684436de602 10258128 libpdfbox2-java_2.0.24.orig.tar.xz
 634c771d80cc58b8fe2dfc364031e3588c1ed734843f2d9878cc65025a667104 10148 libpdfbox2-java_2.0.24-1.debian.tar.xz
 0bf8534401cceaddfb446beb37d3e3af708ffcb24d8e0926b4e342c34f3eea53 16159 libpdfbox2-java_2.0.24-1_amd64.buildinfo
Files:
 bd54b7cccbccf8df2dd60441e7c4b7b5 2560 java optional libpdfbox2-java_2.0.24-1.dsc
 8e21f3c9738c3ac0b5f6c00beb3c1f3a 10258128 java optional libpdfbox2-java_2.0.24.orig.tar.xz
 b7b965c424f8522f38f0db9990a0da63 10148 java optional libpdfbox2-java_2.0.24-1.debian.tar.xz
 f96d02628ab1d4e4646bf8de1eb14a1a 16159 java optional libpdfbox2-java_2.0.24-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmEsB61fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkphEQAJSIa2Vw4DWLVj1L+ag+ei8Q8W+Lm07oEPv8
AY3skFdbYG41gCSjwMrp8Kur0OdqssNHRXoPiT8aX2aS/4gVYk41SBpVm/UKUEeB
AVRTHzokJmYbki3nOpKIJf+ARz0kh4k8OwHXcc4ZxPotv/7+8NFT6DzpUW0xokDE
PA94SSG4X2PTlMPdmnMHqj0YXbe5nj/xG7noJWR0FyOKdWHD5WwtJdcXaIptLW3D
3YjUyoA+ocwam7u+bMqSb2w4yNsYAk2ceoEGkPp5IYkAyCGIrD/QDPU3aFC1nrRi
Fo8HWGZC/zpHjiuCHCkIYJU3lvtWb+YHRcM5lWBCF9tydP4KY58RhQpC8jvTNuE7
WpexoCbiOl1qqVr10neNuqwgBaYs7/k3NgixbvcmzcLJr/AMjKKXP1EDCAT9fJGw
EdNhwpuNZQasuerz3QCLIF6rb3YH+iX/xFQ8ehW5akXH0tA3X/rz98+DmzPPGMhP
9qxqiHt00P9K5U1jdez+2p5TVSfaGrOYHeElPO8YQh26d6+L4D0sM/lAEsBnYDUw
Axt2uV5rrrxqodpFOsn70d0zOOFcQZJdkxQWSLQH5T1HMlux8pFGZnssosFXy065
tOc8utxRuFmNlSXLpJWZ2cwodxqklE0favVug2uDhzU8dav/MVLcl7/QpaUzXweS
StuCnrzu
=7N9V
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.