-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 24 Aug 2020 11:22:38 +0300
Source: libjackson-json-java
Binary: libjackson-json-java libjackson-json-java-doc
Architecture: source
Version: 1.9.2-8+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
libjackson-json-java - streaming fast powerful standard conformant json processor in jav
libjackson-json-java-doc - standard conformant json processor in java - API documentation
Changes:
libjackson-json-java (1.9.2-8+deb9u1) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* Backported security fixes including:
- Jackson Deserializer security vulnerability. (CVE-2017-7525)
- Block more JDK types from polymorphic deserialization. (CVE 2017-15095)
- XXE vulnerability in XmlMapper. (CVE-2019-10172)
Checksums-Sha1:
657cc209f0c70c9e10c1ddba0a69041a795c746d 2413 libjackson-json-java_1.9.2-8+deb9u1.dsc
21a0cc1fe25032d64d74031369e982c71dcb5657 1112971 libjackson-json-java_1.9.2.orig.tar.gz
d79469623186a8f08138113b132999c109963137 8928 libjackson-json-java_1.9.2-8+deb9u1.debian.tar.xz
Checksums-Sha256:
0dec2e97516d52d309c5f80f16807c5f42020482cd140f31f7c941b24aa6c9d9 2413 libjackson-json-java_1.9.2-8+deb9u1.dsc
c384766381d06a8782cef33e8e9f3d296d62a68c6638d2080d1912842a1b9b16 1112971 libjackson-json-java_1.9.2.orig.tar.gz
3414567eb1cc193dbce1553cde3720de94ca841784e50c6a350a289f24f6bad5 8928 libjackson-json-java_1.9.2-8+deb9u1.debian.tar.xz
Files:
ad89ea226be996e2cb4a45b3accf16ae 2413 java optional libjackson-json-java_1.9.2-8+deb9u1.dsc
767a478ff56bd4e00640c8185abeff53 1112971 java optional libjackson-json-java_1.9.2.orig.tar.gz
3f107e778b30dd4edf28c74056f33536 8928 java optional libjackson-json-java_1.9.2-8+deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=YXck
-----END PGP SIGNATURE-----
