-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Nov 2025 21:14:52 +0100 Source: log4cxx Architecture: source Version: 1.4.0-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Tobias Frost Changed-By: Tobias Frost Closes: 1111879 1111881 Changes: log4cxx (1.4.0-1+deb13u1) trixie; urgency=medium . [ Lukas Märdian and Tobias Frost ] * Backport fixes for: - CVE-2025-54812: Improper HTML escaping in HTMLLayout (Closes: #1111879) - CVE-2025-54813: Improper escaping with JSONLayout (Closes: #1111881) Checksums-Sha1: c6a35d2991c822fc47a00da1e2b58900cbb105e4 2449 log4cxx_1.4.0-1+deb13u1.dsc 903e46916681405d0a3cc3311c92961540753072 667835 log4cxx_1.4.0.orig.tar.gz e0026ed8af65a67937c23378ec1b51291a4e7164 833 log4cxx_1.4.0.orig.tar.gz.asc 2a939ae855e363d9c38fcbef1d5f99b0d3e58134 80172 log4cxx_1.4.0-1+deb13u1.debian.tar.xz 7c09b6e5bff5b8396df7dee39f022fe0444060b2 10598 log4cxx_1.4.0-1+deb13u1_amd64.buildinfo Checksums-Sha256: 3c5330436e1b265635a0edd951fa55483ec369642a3a3f2933e152434ef0e348 2449 log4cxx_1.4.0-1+deb13u1.dsc 3d2d1f356a546c14562763aaf15fcc3fd59d4ffeb5a2f68fcb0bbd7571ed6f96 667835 log4cxx_1.4.0.orig.tar.gz 3f935b5cb8da0f84d98585e08c7d90b48249a964a73981291b3eb026a1fc9d3e 833 log4cxx_1.4.0.orig.tar.gz.asc cd10751eea82beb95b5aef8dc1cfdb4826b2df7862949fd26a68b829b6b6d311 80172 log4cxx_1.4.0-1+deb13u1.debian.tar.xz f50adcbde807a60debb898a8eacd2f2491510e13926629a3758d4897fd9e1784 10598 log4cxx_1.4.0-1+deb13u1_amd64.buildinfo Files: 14071dee997bcce76a070b384573069b 2449 devel optional log4cxx_1.4.0-1+deb13u1.dsc ab0dddc7481554ec084b2f98a3d250db 667835 devel optional log4cxx_1.4.0.orig.tar.gz 2ac717b5f0e4c1de0da48af38ae215a1 833 devel optional log4cxx_1.4.0.orig.tar.gz.asc c0e42ad6444d3bfd73684faaf3022d03 80172 devel optional log4cxx_1.4.0-1+deb13u1.debian.tar.xz 92d06609b5852de9a6219f7bf96164ae 10598 devel optional log4cxx_1.4.0-1+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmkNkl4ACgkQkWT6HRe9 XTb8Fg//YV4hh67slpuMyZmP/sNQOLxrYXVX4M9szFU5bqoALWHM/7c+dn66BcXV BHiXLkbBdmxAmf1k3ZVNCZnhRAWtN7M9sAC2HKl93qkRnv/TCojY7HGJ+NMlIaeo Bf22Tyzl48Y1b0um4g2fHpnh/612sUJHjBry2s+jx2r3X5hti2I7E5dQ9cl5bb5r IHl8qyhTwTVeZjfktwlrzYBWlEYQF2BgFIvJHDZWQCY0EcvCl1fEMZ7GzSLEpv/i O7Doq6jWG5tOsN7SRP4iL7PPYhyNVwYsvnm+WdH0wSQ32S4yQJQ3SOrT8roYOO7y avyQzOI7jdLjfVyixqG80clkoCsszOf97WzqlEJ+yMdtcaQpaAtcYh20SWPO/2GE KrweE+9KWpvlDEaoXRQ7iC+/pFvd/BUwkiyTEIWSFGsO1plQYKY6ZBD2iY9bR6hl uKGcjPiEzw/SV4pbxqxE/3zOJ1ZtLIVeRlqTsiLlook7LIeIF8P7fWn80qFQI8aV VW41X6/5fQFTTdIdW7poHvZd5JshA5U3nAGpaBI/otuu3xXfsipZPmkV1FN1uXq7 Exzf0JHpDIIvmq+4Kzy5mWPH5hwzEgSzG9HBcQ/DERlzhvLX031BvLe0cJ8kZMKS WA+LZobdayzyIX6BXFO0WKXW/AhMF3F4bF7llnMiJ9Rk9meyml0= =rZtE -----END PGP SIGNATURE-----