-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 07 Dec 2025 10:34:47 +0100 Source: log4cxx Architecture: source Version: 1.0.0-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Tobias Frost Changed-By: Tobias Frost Closes: 1111879 1111881 Changes: log4cxx (1.0.0-1+deb12u1) bookworm; urgency=medium . [ Lukas Märdian and Tobias Frost ] * Backport fixes for: - CVE-2025-54812: Improper HTML escaping in HTMLLayout (Closes: #1111879) - CVE-2025-54813: Improper escaping with JSONLayout (Closes: #1111881) Checksums-Sha1: 9ee0fa93ff579d17749750cd6ddfae2d7694c05e 2449 log4cxx_1.0.0-1+deb12u1.dsc a6650efba4ac5e5e7bc1be51f3bada739b14a72a 554344 log4cxx_1.0.0.orig.tar.gz 118ff381947235fd28e0112faddc20b42771f693 833 log4cxx_1.0.0.orig.tar.gz.asc 6ac37bdf2fcaa8962df473cb8a83c408a99dba38 36004 log4cxx_1.0.0-1+deb12u1.debian.tar.xz 028d304296b55da302a215fc3aa794145061d4a5 7075 log4cxx_1.0.0-1+deb12u1_source.buildinfo Checksums-Sha256: b360290069d86c53bd594ca4ab77dfddd99b6bd5253cc07e90097b1f5d60b395 2449 log4cxx_1.0.0-1+deb12u1.dsc 6df9f1f682650de6045309473d5b2fe1f798a03ceb36a74a5b21f5520962d32f 554344 log4cxx_1.0.0.orig.tar.gz 8ce50542aad18f5eafabd2aa984afd0432b927d4bfb772f6ac86ba6f0da56bdc 833 log4cxx_1.0.0.orig.tar.gz.asc 0409ec9e485d91ed73598ca11540659ff33e23540d89dc6661f03fe180538e6a 36004 log4cxx_1.0.0-1+deb12u1.debian.tar.xz 146e0081a9ca7ef2f43c617cdd2c3d4ded587699afac20dfd8a5709a5cd9b22c 7075 log4cxx_1.0.0-1+deb12u1_source.buildinfo Files: c1abbf2c662d002bb19fb7f7c34dd2c7 2449 devel optional log4cxx_1.0.0-1+deb12u1.dsc 2255f30cd968e2c1976081824e435bd5 554344 devel optional log4cxx_1.0.0.orig.tar.gz 0a3aa1f1fb70e585c0af17f35d964dcd 833 devel optional log4cxx_1.0.0.orig.tar.gz.asc 434a553da0a7be5aeda787562e8b522b 36004 devel optional log4cxx_1.0.0-1+deb12u1.debian.tar.xz bae4b1508cbb9c506ee3c0b419afe3f0 7075 devel optional log4cxx_1.0.0-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmk1UfIACgkQkWT6HRe9 XTZKEg//dA7WSSFntmVhN/W6DtLbnIondUSXpXzKG2P4N4EzOtsoRYpymYxm7+VK Giij5bRJ6JowllCVyXppKaKQmS4/rbQhwcOW1iApsVMaLuaNrq2d0ePabeytHxYj UkN5CPh/6ZXdi0jE7kLZl4M15vSRstU09av/+A2Eps0orgWKEfyvVdfn4V+xMTWJ 0VkhZqmG3FLjEZ3gmOzHstUpzVrD2B+jIcYvFCfGM684P7hlMFFss/Px2Q34qHFl 10TjEfV3M2Lb0aAgijfHczIOPpHS8tltvFmb1ZOCRSUBts+PAo16K5xHemZ4bKwG APVx2LIWLVzNa9JCkgyVvD7KO3iCF+fHMesRuDC87Ps1cBg3A0Q8tuBz6Vo83S98 pM1gCb+iMCLPQN7T8yPQ82h9vZe1aiAMwVwL+GcYr7iJK8SPWx898N0+WrU3eYwm 1sj4fzed3snjZijtVAmsXzjc4r59kiOh69FSGBrUJ0PEFHCj8i3WenuWaWWDX2sv sb/gxF4JmLHn+fv97yQpy3AYCVx1IhTeOiYjGoMvx6h0BhDit6mXjT8/CBc1BnTF 1sFG+HUz690i891qtQyFuSkqvc/4egJrojLCWYsaEII4iOB+3RN7NPZLgAN8Vr6h l4yeFGLlBaCeFIJZCBIH74Hl+oHwGKWhpbX8FsiJI+ne0MsKbO0= =jaEQ -----END PGP SIGNATURE-----