-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 17 Apr 2020 18:16:25 +0530
Source: jackson-databind
Binary: libjackson2-databind-java libjackson2-databind-java-doc
Architecture: source all
Version: 2.4.2-2+deb8u14
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
libjackson2-databind-java - fast and powerful JSON library for Java -- data binding
libjackson2-databind-java-doc - Documentation for jackson-databind
Changes:
jackson-databind (2.4.2-2+deb8u14) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to fix:
- CVE-2020-10968: Block one more gadget type (bus-proxy)
- CVE-2020-10969: Block one more gadget type (javax.swing)
- CVE-2020-11111: Block one more gadget type (activemq)
- CVE-2020-11112: Block one more gadget type (apache/commons-proxy)
- CVE-2020-11113: Block one more gadget type (openjpa)
- CVE-2020-11619: Block one more gadget type (spring-aop)
- CVE-2020-11920: Block one more gadget type (commons-jelly)
Checksums-Sha1:
0a86c91c3aeb6136b0e665ce36aa43b407ab505b 2573 jackson-databind_2.4.2-2+deb8u14.dsc
aaec538f967e8cd0bbff405eef753d10ba2df664 851898 jackson-databind_2.4.2.orig.tar.gz
6e0d93c3d2e1ac783e909230b88d35b9f116b487 14016 jackson-databind_2.4.2-2+deb8u14.debian.tar.xz
3051bcf1a8aa97c11723c6f89fc6ce2378d619ec 988778 libjackson2-databind-java_2.4.2-2+deb8u14_all.deb
c667596652061ad51fb267a763f70c1feb37797a 4745396 libjackson2-databind-java-doc_2.4.2-2+deb8u14_all.deb
Checksums-Sha256:
c6fe8cf56a43db00d6a2c5b631d59efba0c94ad75c7b2e8dde10ef7dc2ce52dc 2573 jackson-databind_2.4.2-2+deb8u14.dsc
06d8378c6ab40aca83354acf625969801e014a447756ad07e16365925ddf3aa1 851898 jackson-databind_2.4.2.orig.tar.gz
b77b73dd2a831fe383870f51962f74657c30d4a52a3149ac2dbfc05cb8d052f2 14016 jackson-databind_2.4.2-2+deb8u14.debian.tar.xz
129e92abf47e5e836c3637f6d19955fc1ea9a463c080b85799d33a64278269b7 988778 libjackson2-databind-java_2.4.2-2+deb8u14_all.deb
cbd1ad28b9ea3ec4a47d5749b26bcd67c2c3d21c44f7df4d605c644ba2f20cbc 4745396 libjackson2-databind-java-doc_2.4.2-2+deb8u14_all.deb
Files:
ba102bee91e011fb7d9234f2d8b1eea0 2573 java optional jackson-databind_2.4.2-2+deb8u14.dsc
a3cef86907e85f401571db6d5d5ae358 851898 java optional jackson-databind_2.4.2.orig.tar.gz
890a214f6fa3df6d750ce8169bf236fb 14016 java optional jackson-databind_2.4.2-2+deb8u14.debian.tar.xz
f2491c2203809f688cf8bf4c1f4d42a1 988778 java optional libjackson2-databind-java_2.4.2-2+deb8u14_all.deb
2d38e5fc6527c37b689e6655be360679 4745396 doc optional libjackson2-databind-java-doc_2.4.2-2+deb8u14_all.deb
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl6ZrLUTHHV0a2Fyc2hA
ZGViaWFuLm9yZwAKCRCCPpZ2BsNLljiVEAClnGHrHWcsgb8J/enFzPJMtq7DSZYm
KEgW3wUjPRWZGShyGaq7ryfb7oNswUXLBYxzoggQJF4ropiXp7A3rQraOPxdpkEG
2+XHvNqAsZJQ59Rbnon9nnz6tprMyW1daDvaE1F9STK3jxrvW2yx2VYUXfHKnMHN
zYa1jCn1Bs37jNYYB4sOuxQ62zIgsVSmPB30D8SR2n0ot7+5YrYIq3KfFe9elrN6
AFzs/Dvbq4xDPEwYSxfAAjhhueXMY41+I7OGkslWGxlWqU2Ce6Su+710HvSmtA8D
aJXzThmgEANxmb56jJhMT44uHqLalqVpZsF7om2r5qo2iE93eYpvnnU9FO0NL1/2
E7GwHl/MXihpEfPaP97lN+3OeTft+A7VjFUo9s7JleFDVeBfED0ffOEtQAxskL9f
u1fjYXMUN6hzhC7r4Gvz9hUqIqJEaIkiU0emLLHRH8sd8ZBOGvlG2Ljk5qXt0ITr
so67W7ACs4K7HnrXn7fpRnCAQWwPQ8nKCUo9X7po4maStKSqyHsrD6A4uGBNaScb
RZYXCgLUXUq6JDe0Tkabt/ogTatUrGsRD609fo4Wl+pwVLilCTMIBtn59kmJrefw
bjKP4wn1jZ7USWF5wvJQsnWwWWfuRDx1GuoTLm1WJE/zlWPwS2zm238tFfPORnFn
w9RhjtPDo5bPDw==
=oJ/2
-----END PGP SIGNATURE-----
