Accepted jackson-databind 2.8.6-1+deb9u10 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 2 May 2022 19:32:20 CEST
Source: jackson-databind
Binary: libjackson2-databind-java libjackson2-databind-java-doc
Architecture: source
Version: 2.8.6-1+deb9u10
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libjackson2-databind-java - fast and powerful JSON library for Java -- data binding
libjackson2-databind-java-doc - Documentation for jackson-databind
Checksums-Sha1:
2f73119977699782c665d3d493d7ee84892910a7 2701 jackson-databind_2.8.6-1+deb9u10.dsc
0fc5221bfc262df2fb5d6cddaadfb572408e31ef 15996 jackson-databind_2.8.6-1+deb9u10.debian.tar.xz
add5314bce9a96aeac08a3f984645cddce37b0d6 17217 jackson-databind_2.8.6-1+deb9u10_amd64.buildinfo
Checksums-Sha256:
523649882de712741a7e9ac7a0e7bb911fa3361562120058bc70e5889036959c 2701 jackson-databind_2.8.6-1+deb9u10.dsc
0f50a5a610615b14f254cd1ec4f9430ccbb9c9a020b2c86b97cd27542e3043ad 15996 jackson-databind_2.8.6-1+deb9u10.debian.tar.xz
4d892ab2b855f1491a697db4e40b436427dfe230f6288152a40251fcc49704bf 17217 jackson-databind_2.8.6-1+deb9u10_amd64.buildinfo
Changes:
jackson-databind (2.8.6-1+deb9u10) stretch-security; urgency=high
.
* Team upload.
* Fix CVE-2020-36518:
- Fix CVE-2020-36518: Java StackOverflow exception and denial of service
via a large depth of nested objects.
Files:
bc2bc4bdb2811b695bf4e41cf2342196 2701 java optional jackson-databind_2.8.6-1+deb9u10.dsc
4da0d893571e992b1e9fe20ade0cfa4e 15996 java optional jackson-databind_2.8.6-1+deb9u10.debian.tar.xz
4fc2638a70c59232afd0ac5daee7ec0c 17217 java optional jackson-databind_2.8.6-1+deb9u10_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=xiNQ
-----END PGP SIGNATURE-----