-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 14 Oct 2020 11:15:52 +0100 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source all Version: 2.8.6-1+deb9u8 Distribution: stretch-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libjackson2-databind-java - fast and powerful JSON library for Java -- data binding libjackson2-databind-java-doc - Documentation for jackson-databind Changes: jackson-databind (2.8.6-1+deb9u8) stretch-security; urgency=high . * CVE-2020-25649: Prevent an external entity expansion vulnerability in the DOM serializer. Checksums-Sha1: c23be9c22688a1321e11983de83c56ed0eab4294 2546 jackson-databind_2.8.6-1+deb9u8.dsc 722ce2f73837560d20eeafdc1c8223a36fb74726 738780 jackson-databind_2.8.6.orig.tar.xz 2e4d790ae9489d7bd709ee91e37e807ef6904aed 12116 jackson-databind_2.8.6-1+deb9u8.debian.tar.xz e16070de6b647678ab3b73d576e4509521ea93c9 16836 jackson-databind_2.8.6-1+deb9u8_amd64.buildinfo 1f068f5dcec18804205488da17c65c0a619e38ca 1229640 libjackson2-databind-java-doc_2.8.6-1+deb9u8_all.deb 5a071f298e5d69374be62e2bc14ce58c45d1b1c3 1157130 libjackson2-databind-java_2.8.6-1+deb9u8_all.deb Checksums-Sha256: 5b90d1d2cfac170309fafa0fb0a3b40e7b6cb5f5a214568c14aafc52f352d2b4 2546 jackson-databind_2.8.6-1+deb9u8.dsc 1c2edb33da5ad8baafb4b291872f885ee1cfc773683288bd514a19aa19c639d1 738780 jackson-databind_2.8.6.orig.tar.xz 2df19ce74af98befc01da2447d329636148bd4223456befae110b4c4b5f16c1a 12116 jackson-databind_2.8.6-1+deb9u8.debian.tar.xz 55fcfa06ee05456980b6812b9f7f7219c0fddcf7e3915c7dce22c402cfeb59bc 16836 jackson-databind_2.8.6-1+deb9u8_amd64.buildinfo fa49ede98c80fc76d6e73ff5b71b5d57b771142a970d8ca956911d8313d14b23 1229640 libjackson2-databind-java-doc_2.8.6-1+deb9u8_all.deb 6785dfc9bf7d6d0ee1527e886ce778ae74cbe95375de638cf10029fbca3a0c92 1157130 libjackson2-databind-java_2.8.6-1+deb9u8_all.deb Files: ee887e5e443c615e3104ec04e86260ba 2546 java optional jackson-databind_2.8.6-1+deb9u8.dsc 399c2e0e54a1c8e34261f42e29bc1c6e 738780 java optional jackson-databind_2.8.6.orig.tar.xz 90eca12fc2b39d8ea2baa5bbab4475c1 12116 java optional jackson-databind_2.8.6-1+deb9u8.debian.tar.xz 357794fe4f35db0eb3de9ecaa1cff939 16836 java optional jackson-databind_2.8.6-1+deb9u8_amd64.buildinfo 0605d0650c1fe42a2c7a139f59c46305 1229640 doc optional libjackson2-databind-java-doc_2.8.6-1+deb9u8_all.deb f7ad6114cb92cd8c864434bf51430744 1157130 java optional libjackson2-databind-java_2.8.6-1+deb9u8_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl+G014ACgkQHpU+J9Qx HlicExAAjTEhD4zm8CAmZxO6gbXu1MIf+mWXQjQB9//xUCVkm6wRtykGFdgtkyNG PEWTkdHnbeS2Z1/zGTvM03FJYRrrxmU4T1yniOCakQ0CM786COTQP+67LrltPAma GPTRBHvxImaVQFKEHk3YmGkM3GjX/a0pFLoKC89J7/grq3RXkZaT/86WR4UJMtE6 Vtc1+G6qITr/SpPpbAQzE/Rj03IqpgTfbQPF8O57+2JoLqijNu0qke7u+L3nCRtZ geavElut2Hk2t1G5XjzDcxUcvmffdgXdE9JUzgGXnzBd9OSWstZxLEFp8CxZwnog xy1xx195l9hQN1V8Xfiq8LOuaOXq3FBj17jwhXSChTO3czTr0h+GkjirnkXej5Bi ySIbFj/AEMU+azEylQgkE825K+HmBvhRPhRpbTbrapYxf6Vs9Pco3PJKLXENOt39 /xinT229Hx9q3heMSwvRg8N/dOr2hsQIlbQV/EA2X9zG6uH5HFWn+HQFjizrOgNX rjgtxDDvoiHNdbw4/z64MIVWCq4nCzDLRPBLwxVCQyYFK4DwThvO6Z1iMsoYCfQw rMCnsPOfQZvA9pXtl2wb9uzbGgaC7U7XKGvxX2mcyBtkHnnFzcrllSFP8nioXeFD vv0b1dHAy7aDEmemtKqdytaeyOyywz/fhE+EFcNWanuTqjMoQLA= =0WW4 -----END PGP SIGNATURE-----
