-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Jan 2022 14:04:02 +0200 Source: libjackson-json-java Architecture: source Version: 1.9.13-2~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Changes: libjackson-json-java (1.9.13-2~deb10u1) buster; urgency=medium . * Non-maintainer upload. * Rebuild for buster. - Revert the debhelper compat bump. . libjackson-json-java (1.9.13-2) unstable; urgency=medium . * Team upload. * Add upstream fixes. - Serializing types for deeply nested Maps. - Set Secure Processing flag on DocumentBuilderFactory. - Set setExpandEntityReferences(false). (Fixes: CVE-2019-10172) - WriteRawValue surrogate pair fix. - Fix deserialization. - All known security fixes. (Fixes: CVE-2017-15095 and CVE-2017-7525) * Update Standards-Version to 4.5.0 * Use debhelper-compat. - Update compat level to 13. Checksums-Sha1: b3f14c369ac0c15dee173ffa8e8ca7ce1123c061 2428 libjackson-json-java_1.9.13-2~deb10u1.dsc 2c6702f1670624538988dc7f75526da01f2f9e28 10600 libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz Checksums-Sha256: c366cca12488ffd9580be0e676540bd5a550939ceb3116632ee19f60759a6980 2428 libjackson-json-java_1.9.13-2~deb10u1.dsc 90bf232c626e683d3d87a983f8d240bda66f1169ab8d2ec55bb1ba023ed33be2 10600 libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz Files: aaf0c3f1f74244520c63e8705e1de3a5 2428 java optional libjackson-json-java_1.9.13-2~deb10u1.dsc 3c8b9dcabcbcab4781bf36333ea7b16d 10600 java optional libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmHkCwgACgkQiNJCh6LY mLEBJxAAgIg5jKqwW2BD+SiZ7T7eYUzTd67M5rwcVANjGPcfkzg4ILLjImAb4ZeT OqucFopeQn3s+VSZHDdECOVaRzrvIvDG+e0TSce/N30+eaj8AqwZC6zEIm/A037n W+5dvj6VF6K2wEwmFR/lYG4ZiXHnvoEr9WrLoMD9agpG3IWP46f8CSfSPGBb3wuk lpvOjJsXd/thUsGlwGNHtzD7me1z0luf2IkBec+A1RSHxUUR70Nu59L3dro3d9GJ FpSIQKww6bCshc+Q9C20bdl7rfe5mXygpLPpSiS0vvImUOJoCy1wAwqpzm7jzGpM u1XNsNGIMeXV/1yNTrTVCzLYmprpEtRoOIruVEJm/qzoXjbnuD21R9qxPt3qRAtl 7/7j6wwAzptZY+VOOXJXJPkV1FHHBNoPkxxwGCxxXGSNAlOsJL/sC3qVHMbNGay6 fVLmNxW2YOo07eTHEuHq5rpAE6K+17Kph1yW8WzYKoC1PxkU6MZcF7g+xjycM6Rr W1RoQ/z3vao08c+k5MfJwt1adgJNsPcUtRJm5l9vaH6DaRIm0cFo8O8scXiIMLL1 TJdc+vGcvjbJyXnWoF9qpgFW9fW6Fhw4ScNWgb6d3oZ0vxEOedjc+R/E0RpRbvX7 PrwstrPidlksIVcyMjhrb2kMplfc90sIrXfXoHB/SDr1l4REPoE= =mgis -----END PGP SIGNATURE-----