-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 06 Mar 2020 01:39:43 +0530
Source: jackson-databind
Binary: libjackson2-databind-java libjackson2-databind-java-doc
Architecture: source all
Version: 2.4.2-2+deb8u12
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
libjackson2-databind-java - fast and powerful JSON library for Java -- data binding
libjackson2-databind-java-doc - Documentation for jackson-databind
Changes:
jackson-databind (2.4.2-2+deb8u12) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to fix:
- CVE-2020-9546: Block one more gadget type (shaded-hikari-config).
- CVE-2020-9547 & CVE-2020-9548: Block two more gadget types
(ibatis-sqlmap, anteros-core).
Checksums-Sha1:
e694fc694fe0868877a923ffa7f642a4231008c3 2573 jackson-databind_2.4.2-2+deb8u12.dsc
aaec538f967e8cd0bbff405eef753d10ba2df664 851898 jackson-databind_2.4.2.orig.tar.gz
c290827087b7ed0562214010baae9287c781d635 13052 jackson-databind_2.4.2-2+deb8u12.debian.tar.xz
ce9c9cde77f73ecf94a51064745c83d01faea911 988466 libjackson2-databind-java_2.4.2-2+deb8u12_all.deb
2f3f57a5f158267731837a3b5056818bcacfc60d 4753208 libjackson2-databind-java-doc_2.4.2-2+deb8u12_all.deb
Checksums-Sha256:
610051ee8809e9e4cb8bd5b416709571bbb2b71134927215ab00d21ed0d22c5e 2573 jackson-databind_2.4.2-2+deb8u12.dsc
06d8378c6ab40aca83354acf625969801e014a447756ad07e16365925ddf3aa1 851898 jackson-databind_2.4.2.orig.tar.gz
31e124c5610a82240840734c711e4df5dc61fe37eb1dfe09b58b754d80c87afb 13052 jackson-databind_2.4.2-2+deb8u12.debian.tar.xz
c79b89cf130dc8588d58f478e3da3f479ea029a6ba967d9ced7b1065dd257d46 988466 libjackson2-databind-java_2.4.2-2+deb8u12_all.deb
90b78f0f860524863711491452114034908332a800ad9b424c3d9b542548b5ca 4753208 libjackson2-databind-java-doc_2.4.2-2+deb8u12_all.deb
Files:
6409e5a4ad4e5010176ba6e7eff9b208 2573 java optional jackson-databind_2.4.2-2+deb8u12.dsc
a3cef86907e85f401571db6d5d5ae358 851898 java optional jackson-databind_2.4.2.orig.tar.gz
4ad91984eb8f3aae701f0c0e5537dcb8 13052 java optional jackson-databind_2.4.2-2+deb8u12.debian.tar.xz
67e3ca3d6c77aea9e791bbe0492a34cf 988466 java optional libjackson2-databind-java_2.4.2-2+deb8u12_all.deb
15d14dd50cec774cf5a8829a6577f146 4753208 doc optional libjackson2-databind-java-doc_2.4.2-2+deb8u12_all.deb
-----BEGIN PGP SIGNATURE-----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=3DsS
-----END PGP SIGNATURE-----
