Accepted jackson-databind 2.4.2-2+deb8u11 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 20 Feb 2020 11:53:00 +0100
Source: jackson-databind
Binary: libjackson2-databind-java libjackson2-databind-java-doc
Architecture: source all
Version: 2.4.2-2+deb8u11
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Description:
libjackson2-databind-java - fast and powerful JSON library for Java -- data binding
libjackson2-databind-java-doc - Documentation for jackson-databind
Changes:
jackson-databind (2.4.2-2+deb8u11) jessie-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2019-20330, CVE-2020-8840: block more classes to prevent RCE attacks
when deserializing objects from untrusted users.
Checksums-Sha1:
5a577802d6e9623c95f15573641a2c505cc3c206 2544 jackson-databind_2.4.2-2+deb8u11.dsc
aaec538f967e8cd0bbff405eef753d10ba2df664 851898 jackson-databind_2.4.2.orig.tar.gz
843fbe2d07b7c4b6f8e804603beccd07d0956888 12604 jackson-databind_2.4.2-2+deb8u11.debian.tar.xz
4fae269f254830a67fdd6b8ecf5e5fdbe0cbf15c 988142 libjackson2-databind-java_2.4.2-2+deb8u11_all.deb
0978e7bb040548548f58cfdd9b93e709b72b4c17 4748510 libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb
Checksums-Sha256:
9ac2f1dae11983abfb3eb591a6f601711833754960997cb665a20e5ec0cd7769 2544 jackson-databind_2.4.2-2+deb8u11.dsc
06d8378c6ab40aca83354acf625969801e014a447756ad07e16365925ddf3aa1 851898 jackson-databind_2.4.2.orig.tar.gz
42e6edffcdb1fb0e4bf7669ca37bff79a5719687bde8c05e809967f0068ca3d0 12604 jackson-databind_2.4.2-2+deb8u11.debian.tar.xz
088bd600498dfb8a1402fc5a5057ed9722b91ed35a9fa0e70a707b47aad3d18a 988142 libjackson2-databind-java_2.4.2-2+deb8u11_all.deb
36175dd91fb81b2730116af8821a49c1b386355d219c1fc53ac67dda1a6c4d8d 4748510 libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb
Files:
8ee723e3ded81500809b2f4b3ff7f9ac 2544 java optional jackson-databind_2.4.2-2+deb8u11.dsc
a3cef86907e85f401571db6d5d5ae358 851898 java optional jackson-databind_2.4.2.orig.tar.gz
29185a9c20cc3dd658546a2f41c5e9da 12604 java optional jackson-databind_2.4.2-2+deb8u11.debian.tar.xz
e11bf8a1b8c8e103fb66d9dc9be37915 988142 java optional libjackson2-databind-java_2.4.2-2+deb8u11_all.deb
ddacf52c5aef369f24c05cd6e686888d 4748510 doc optional libjackson2-databind-java-doc_2.4.2-2+deb8u11_all.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl5OmpIACgkQnUbEiOQ2
gwL0xxAAx4M89aNHm/rvQV0iLmUw1d0qqZaqxHFItPc9PuSsImt4B2iVHYoYCwM/
rnsRFriWkPi4XhYnGVR/sc1jiKrRGXl68JtBpTqr1rEeb5cEGaouzysy+sNLmSIA
AVGuQJ1faSwUtMnv1SyxKzkH9H1lSbi/gz+n591649VTHK1kXh9JB6aCnHnukjN0
GG5RCG6VtZMVew+SEz9lzr59PoLIJmENXPYKKVwzKIwpNBBgSxKb/xGdyTxoRaZx
M0iwZBrjhxD5ceGJefX0KQISqOryzLIq//nx4MqnziJq0LHUKdLM5Y34+4zOfmVF
yD/2YFeN0fr/gEVriaEjxa7HnmZ4RVxn4Uv+sMdD3ruMVtNDK5Pfs9KyRhC7iUoY
IPznndBDmPUNJAcmdyaozutzcCvWT8ExLa+mTi15uCJFXN1tHP/3UyxZY7q3ye0Y
8mnHXzID4xH008no3t0i8DgfWS27JCHYt07pWOOrVQwaCnTVHurOnKCZoljEQFDp
nU/FTgNajbta3Ru5II7wzZGwAR4XAly0/FSKbT8HztV4kzlpfzyFOsy8Z2AYj4CR
g6XT9k1W4PpwIJyoiR9TgdOVYOGz/aTESDT5XHcK77vwm+OUkPYVbyG6c+zx82qY
6IFREoJNaGijBwxYZSdIA+nfEpZOkW8oq2nQzV01ieJ1UaB+jvc=
=quOv
-----END PGP SIGNATURE-----