-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 20 Feb 2020 11:53:00 +0100 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source all Version: 2.4.2-2+deb8u11 Distribution: jessie-security Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: libjackson2-databind-java - fast and powerful JSON library for Java -- data binding libjackson2-databind-java-doc - Documentation for jackson-databind Changes: jackson-databind (2.4.2-2+deb8u11) jessie-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2019-20330, CVE-2020-8840: block more classes to prevent RCE attacks when deserializing objects from untrusted users. Checksums-Sha1: 5a577802d6e9623c95f15573641a2c505cc3c206 2544 jackson-databind_2.4.2-2+deb8u11.dsc aaec538f967e8cd0bbff405eef753d10ba2df664 851898 jackson-databind_2.4.2.orig.tar.gz 843fbe2d07b7c4b6f8e804603beccd07d0956888 12604 jackson-databind_2.4.2-2+deb8u11.debian.tar.xz 4fae269f254830a67fdd6b8ecf5e5fdbe0cbf15c 988142 libjackson2-databind-java_2.4.2-2+deb8u11_all.deb 0978e7bb040548548f58cfdd9b93e709b72b4c17 4748510 libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb Checksums-Sha256: 9ac2f1dae11983abfb3eb591a6f601711833754960997cb665a20e5ec0cd7769 2544 jackson-databind_2.4.2-2+deb8u11.dsc 06d8378c6ab40aca83354acf625969801e014a447756ad07e16365925ddf3aa1 851898 jackson-databind_2.4.2.orig.tar.gz 42e6edffcdb1fb0e4bf7669ca37bff79a5719687bde8c05e809967f0068ca3d0 12604 jackson-databind_2.4.2-2+deb8u11.debian.tar.xz 088bd600498dfb8a1402fc5a5057ed9722b91ed35a9fa0e70a707b47aad3d18a 988142 libjackson2-databind-java_2.4.2-2+deb8u11_all.deb 36175dd91fb81b2730116af8821a49c1b386355d219c1fc53ac67dda1a6c4d8d 4748510 libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb Files: 8ee723e3ded81500809b2f4b3ff7f9ac 2544 java optional jackson-databind_2.4.2-2+deb8u11.dsc a3cef86907e85f401571db6d5d5ae358 851898 java optional jackson-databind_2.4.2.orig.tar.gz 29185a9c20cc3dd658546a2f41c5e9da 12604 java optional jackson-databind_2.4.2-2+deb8u11.debian.tar.xz e11bf8a1b8c8e103fb66d9dc9be37915 988142 java optional libjackson2-databind-java_2.4.2-2+deb8u11_all.deb ddacf52c5aef369f24c05cd6e686888d 4748510 doc optional libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl5OmpIACgkQnUbEiOQ2 gwL0xxAAx4M89aNHm/rvQV0iLmUw1d0qqZaqxHFItPc9PuSsImt4B2iVHYoYCwM/ rnsRFriWkPi4XhYnGVR/sc1jiKrRGXl68JtBpTqr1rEeb5cEGaouzysy+sNLmSIA AVGuQJ1faSwUtMnv1SyxKzkH9H1lSbi/gz+n591649VTHK1kXh9JB6aCnHnukjN0 GG5RCG6VtZMVew+SEz9lzr59PoLIJmENXPYKKVwzKIwpNBBgSxKb/xGdyTxoRaZx M0iwZBrjhxD5ceGJefX0KQISqOryzLIq//nx4MqnziJq0LHUKdLM5Y34+4zOfmVF yD/2YFeN0fr/gEVriaEjxa7HnmZ4RVxn4Uv+sMdD3ruMVtNDK5Pfs9KyRhC7iUoY IPznndBDmPUNJAcmdyaozutzcCvWT8ExLa+mTi15uCJFXN1tHP/3UyxZY7q3ye0Y 8mnHXzID4xH008no3t0i8DgfWS27JCHYt07pWOOrVQwaCnTVHurOnKCZoljEQFDp nU/FTgNajbta3Ru5II7wzZGwAR4XAly0/FSKbT8HztV4kzlpfzyFOsy8Z2AYj4CR g6XT9k1W4PpwIJyoiR9TgdOVYOGz/aTESDT5XHcK77vwm+OUkPYVbyG6c+zx82qY 6IFREoJNaGijBwxYZSdIA+nfEpZOkW8oq2nQzV01ieJ1UaB+jvc= =quOv -----END PGP SIGNATURE-----
