activemq (5.17.6+dfsg-2) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/java-team/activemq.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 2928640
Browser: https://salsa.debian.org/java-team/activemq
Last scan: 2025-06-16 20:11:05+00
Next scan: 2025-06-24 08:27:00+00

Debian changelog in Git:

activemq (5.17.6+dfsg-2) unstable; urgency=medium

  [ Pierre Gruet ]
  * Removing the patch about missing Maven artifact as libxstream-java now
    properly declares the classpath of its jar

  [Emmanuel Arias]
  * CVE-2025-27533: Avoid memory allocation with excessive size value during
    unmarshalling of OpenWire commands. The size value of buffers was not
    properly validated which could lead to excessive memory allocation
    and be exploited to cause a denial of service (Closes: #1104933).
    - d/control: Add libjavassist-java as build dependency. It is needed for
    the patch.
  * d/control: Add myself as uploaders.

 -- Emmanuel Arias <eamanu@debian.org>  Thu, 29 May 2025 16:29:53 -0300

This branch is even with tag debian/5.17.6+dfsg-2