-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 01 Jul 2020 15:28:40 +0530
Source: jackson-databind
Binary: libjackson2-databind-java libjackson2-databind-java-doc
Architecture: source all
Version: 2.4.2-2+deb8u15
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
libjackson2-databind-java - fast and powerful JSON library for Java -- data binding
libjackson2-databind-java-doc - Documentation for jackson-databind
Changes:
jackson-databind (2.4.2-2+deb8u15) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to fix
- CVE-2020-14060: Block one more gadget type (apache-drill)
- CVE-2020-14061: Block one more gadget type (weblogic/oracle-aqjms)
- CVE-2020-14062: Block one more gadget type (xalan2)
- CVE-2020-14195: Block one more gadget type (org.jsecurity)
Checksums-Sha1:
e9fc13e5e72d7b82c08a16b70399c4a0df7e44a7 2573 jackson-databind_2.4.2-2+deb8u15.dsc
aaec538f967e8cd0bbff405eef753d10ba2df664 851898 jackson-databind_2.4.2.orig.tar.gz
935c50129013a27cc3a6fb73c009bb7cc167ba98 14312 jackson-databind_2.4.2-2+deb8u15.debian.tar.xz
e355dd48e261c4242ea144340d06e35663fcd8fb 989042 libjackson2-databind-java_2.4.2-2+deb8u15_all.deb
ba1b92b50917a94b6370c5a0d7e3cc13adc6aa00 4747664 libjackson2-databind-java-doc_2.4.2-2+deb8u15_all.deb
Checksums-Sha256:
b06994be7a4b8d49938ab61187f9843ecd400df265ff5ca3f195e2b74e933927 2573 jackson-databind_2.4.2-2+deb8u15.dsc
06d8378c6ab40aca83354acf625969801e014a447756ad07e16365925ddf3aa1 851898 jackson-databind_2.4.2.orig.tar.gz
ace49368759726ab2d1273c346c92ba5d36d7c76e6cfe5f46f5e220ea0ca2481 14312 jackson-databind_2.4.2-2+deb8u15.debian.tar.xz
31f8ed09c8b0abbabc88851943d561246e2e779b1b68d7e75e591bc88994b964 989042 libjackson2-databind-java_2.4.2-2+deb8u15_all.deb
a0598626d6daefb5562f2b60adaaacdd3e16b7b849bcab7b252a3f8fb14048bd 4747664 libjackson2-databind-java-doc_2.4.2-2+deb8u15_all.deb
Files:
463b663d095c75e6a7113f2f0c6b0a4b 2573 java optional jackson-databind_2.4.2-2+deb8u15.dsc
a3cef86907e85f401571db6d5d5ae358 851898 java optional jackson-databind_2.4.2.orig.tar.gz
f757d3d09effda5eaf97df311dfcd759 14312 java optional jackson-databind_2.4.2-2+deb8u15.debian.tar.xz
dc48714e518f9e595898cb7071445fa6 989042 java optional libjackson2-databind-java_2.4.2-2+deb8u15_all.deb
79c49425644f22d6c88f2839a03c0ca9 4747664 doc optional libjackson2-databind-java-doc_2.4.2-2+deb8u15_all.deb
-----BEGIN PGP SIGNATURE-----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=hgPq
-----END PGP SIGNATURE-----
