-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 31 Jan 2020 21:12:28 +0200 Source: libjackson-json-java Binary: libjackson-json-java libjackson-json-java-doc Architecture: source all Version: 1.9.2-3+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libjackson-json-java - streaming fast powerful standard conformant json processor in jav libjackson-json-java-doc - standard conformant json processor in java - API documentation Changes: libjackson-json-java (1.9.2-3+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload. * Backported security fixes including: - Jackson Deserializer security vulnerability. (CVE-2017-7525) - Block more JDK types from polymorphic deserialization. (CVE 2017-15095) - XML external entity vulnerabilities. (CVE-2019-10172) Checksums-Sha1: 6117ff377188165d5a7f4a27fcab8949e1d50ef4 2349 libjackson-json-java_1.9.2-3+deb8u1.dsc 21a0cc1fe25032d64d74031369e982c71dcb5657 1112971 libjackson-json-java_1.9.2.orig.tar.gz 75c00cea09188b4b3b97e446be5a573caf91c2eb 11588 libjackson-json-java_1.9.2-3+deb8u1.debian.tar.xz 9a6bf66e236d7e6409b7d1710fb5b69a1f023bed 1036324 libjackson-json-java_1.9.2-3+deb8u1_all.deb a6ae0e2d523165fb309be814784d00d858347253 999370 libjackson-json-java-doc_1.9.2-3+deb8u1_all.deb Checksums-Sha256: 8d944bc076296d643e03a0997b5d53ec12ef24bea8a3ea6ebf2a04c3b22e8dd2 2349 libjackson-json-java_1.9.2-3+deb8u1.dsc c384766381d06a8782cef33e8e9f3d296d62a68c6638d2080d1912842a1b9b16 1112971 libjackson-json-java_1.9.2.orig.tar.gz 6f7dabd552fbb67ea09bba22fc3a74d8e0aea6d108653d870dfd84a766a9fad0 11588 libjackson-json-java_1.9.2-3+deb8u1.debian.tar.xz cc5cb3f8811ba9fcdb97e2b8aa5ea851fe8c139ccd0b5bd1b8950e63eaa816c3 1036324 libjackson-json-java_1.9.2-3+deb8u1_all.deb 1a41a7b4a3f6a8eced3f63a8cda0dfc4959af1ba2a595ad2f3712cc84ea49f43 999370 libjackson-json-java-doc_1.9.2-3+deb8u1_all.deb Files: 2c6336102a02d96e7506d7018fb5f5a3 2349 java optional libjackson-json-java_1.9.2-3+deb8u1.dsc 767a478ff56bd4e00640c8185abeff53 1112971 java optional libjackson-json-java_1.9.2.orig.tar.gz c5deb3b4a01ad310ff24a1d3209be8ee 11588 java optional libjackson-json-java_1.9.2-3+deb8u1.debian.tar.xz 56058a979cb0acf68891bae4b21d793c 1036324 java optional libjackson-json-java_1.9.2-3+deb8u1_all.deb 12a5b452e51ae668845d90537b04346e 999370 doc optional libjackson-json-java-doc_1.9.2-3+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAl40iqEACgkQiNJCh6LY mLF30xAAkeM7JCYpW8nxsHfAZDwfEWPbI4A0yskK60aWi45/gqOjqCVwdQghRgzM 2HWhJhTuHfl1uHu/p6GTb7hm/oMt22aw3SXFJtoaTawZnEyURMTyVOlfJDEd9u5+ S/PzM6OXGutcIl+YucjJ9ImAEx5hLnmLbefHOjDfvca7O5Z/zN//dEfVhNhDYL4P 6I5ul3KmSX/wWIBkvRdQ6o+o1B/t+RU1k7MhcAHtkO1iO1nFKgPC31wBZP25n3qH huJvL8g/HhLKxSOkCnC/hXgB+17/QPOi0KLE8CMCC+lx1JIlMKgjKtycFEpkqXKO qYs/XESZ6iBMMQyGCbkQeKd1W7vUQ28EXkUFbdWLJBCSEektBxTqhnwSpHjrcXfK UHm8aG/yixBQC6SZxUOWaYgGCvKzhbZfP7/rbFZLcVKxz51UZ7QKmnIIwiUcERNN lji2qgtMfLmXQJbIgD8WNOb2wnfTZIu9IG6QMISQyTCFJIVkApORpjyXbu+ixOGZ 0kY09Q2i41zlIyp0IfsEiKkWAVOZgzk+6XSjVcDzOq309SdO+odayaHzWO4XSoF9 1+Abp9XyfAdpzskxG7DZflWSuyb5RqYXWWDM0UZI9fJ9Swl/FKmJBGMffNRUq2dB IJpCiDKxcI9bkN5agEo+w7qfjdUQ3AZW1X6PKIZ1OKQo/EhLNMA= =aYw1 -----END PGP SIGNATURE-----