-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Sep 2019 21:51:57 +0200 Source: jackson-databind Architecture: source Version: 2.10.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Closes: 898140 940498 Changes: jackson-databind (2.10.0-1) unstable; urgency=medium . * Team upload. * New upstream version 2.10.0. -Fix CVE-2019-14540 and CVE-2019-16335: Polymorphic Typing issues. (Closes: #940498) Thanks to Salvatore Bonaccorso for the report. * Declare compliance with Debian Policy 4.4.1. * Update base-pom.patch for new release. * Remove Wolodja Wentland from Uploaders. Add myself to it. (Closes: #898140) Checksums-Sha1: 007bc9bc870c07686543b945531601564c00dc61 2689 jackson-databind_2.10.0-1.dsc 0d29a12dd73e668f9b00688a0ddbb932211be705 1306929 jackson-databind_2.10.0.orig.tar.gz 033df104b8bb65e2a6a44247fe80aee662c2ee4b 5336 jackson-databind_2.10.0-1.debian.tar.xz 0335d4cf4afcc7d43e30197c95fe22ccd59d272d 16723 jackson-databind_2.10.0-1_amd64.buildinfo Checksums-Sha256: 00101f834a2cf7adaa09d5e77c063518c351eaf1f6f4e876ae028c750a002426 2689 jackson-databind_2.10.0-1.dsc 8d00ebf75a4e1e615762e35c8bdb1f4980b6141a75ae2c8234e3cd671994abae 1306929 jackson-databind_2.10.0.orig.tar.gz 27b1c1c9c010ec8c3972985d757c86498a1ae7391df612e04271ebe7a1e78c0c 5336 jackson-databind_2.10.0-1.debian.tar.xz 81df14b5c7f8114824ff0908e4b25605fd26501146c10c0b66b177eb572e01c9 16723 jackson-databind_2.10.0-1_amd64.buildinfo Files: 796dce3ecd99fd4930b2f2fe85d20ab7 2689 java optional jackson-databind_2.10.0-1.dsc 9d65f85cd5665de881904565fe30ae13 1306929 java optional jackson-databind_2.10.0.orig.tar.gz ab6e161fe2aeb522b304bcfccd6b7197 5336 java optional jackson-databind_2.10.0-1.debian.tar.xz 79999424c9ba8922b94bcef9a38e15b1 16723 java optional jackson-databind_2.10.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl2REApfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkvyUQAIgIHd3AXQnlAJe3MdTuH1/zGs9zOFU6MuKu otS32VQ8xVwWpxvie4n8nrfEwDpcco0sPFPR69/DBwqm5CjkXMS2lUoJakS/JABv de3dsWAk9l8LyFod1uW083yyNTJxZz2BYQiPU7nyEB95u0lJlNN4syHyJ31NY8LO 4DWwuNgI7i/gMD85TzlJzO1MLTgGxgBo3fcoq2gOPmlLZr0cfcCWbUO+16s/4X+L 8913N7Ze+8aqQU8tzRuwwrZyTHIAWzx98GL8tVjzSNbcnOaMPPBI3hKQm6KCzoYM LiddKdzckrjIuMPthn5Ed8SQ7O5Ff37wUCRZlxzZzj8KXhsUFhSpYGXkCUCI+ACx 8QKynTUmJMkgCsHfOaWCMYSTjKTw5xtfQ9GR1VhSPf20saB/mEcUundL6NoJs7id xuJ6HOiviNMmK6QrkjvKDMf+hzsdyk2/BOGNoAPgqx2+CKQdlzftM9q9ULDtO2kj VIwJhluqfsC9oK1pGQJe6XszillIVpncxSxIz+CtWTlJnaHAnWPTT0roTecSoQJu Kr/22xYcNPj3QjcDRui6JJvLvFKRhgxBJvuRfSSn3mDgAD/ZuoG+4LFJVu9iCKcX evtbvE3k0N2GwSrOPGNhTDwpNyeQoXVtYjCbHRqwlRoPAI+W/QEI3l6mRD3Rpm0S yhtkzYXi =P6PU -----END PGP SIGNATURE-----
