Ubuntu
jackson-databind package

jackson-databind 2.8.6-1+deb9u3build0.17.10.1 source package in Ubuntu

Changelog

jackson-databind (2.8.6-1+deb9u3build0.17.10.1) artful-security; urgency=medium

  * fake sync from Debian

jackson-databind (2.8.6-1+deb9u3) stretch-security; urgency=high

  * Team upload.
  * Fix CVE-2017-17485 and CVE-2018-5968:
    Bybass of deserialization blackist to disallow unauthenticated remote code
    execution. These CVE exist due to an incomplete fix for CVE-2017-7525.
    (Closes: #888316, #888318)

 -- Steve Beattie <email address hidden>  Thu, 15 Feb 2018 10:15:00 -0800

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Artful
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Artful: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
jackson-databind_2.8.6.orig.tar.xz 721.5 KiB 1c2edb33da5ad8baafb4b291872f885ee1cfc773683288bd514a19aa19c639d1
jackson-databind_2.8.6-1+deb9u3build0.17.10.1.debian.tar.xz 8.3 KiB 9a3f0b95fa299a3f1b762bd36f2bcfe0df5f522ac03709545616f52d23b96ad8
jackson-databind_2.8.6-1+deb9u3build0.17.10.1.dsc 2.5 KiB 22ea50a7b6d0e5e2dfc169f965c85a6ffc769431c648fd5937d418e8c48a6767

View changes file

Binary packages built by this source

libjackson2-databind-java: No summary available for libjackson2-databind-java in ubuntu artful.

No description available for libjackson2-databind-java in ubuntu artful.

libjackson2-databind-java-doc: No summary available for libjackson2-databind-java-doc in ubuntu artful.

No description available for libjackson2-databind-java-doc in ubuntu artful.