Change logs for jackson-databind source package in Bionic

  • jackson-databind (2.9.8-1~18.04) bionic; urgency=medium
    
      * Backport for OpenJDK 11. LP: #1814133.
    
    jackson-databind (2.9.8-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release
        - Depend on libjackson2-core-java (>= 2.9.8)
      * Standards-Version updated to 4.3.0
      * Use salsa.debian.org Vcs-* URLs
    
     -- Matthias Klose <email address hidden>  Wed, 27 Feb 2019 14:44:22 +0100
  • jackson-databind (2.9.5-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream version 2.9.5.
        - Fix CVE-2018-7489: incomplete fix for CVE-2017-7525 permits unsafe
          serialization via c3p0 libraries. (Closes: #891614)
      * Remove --has-package-version flag.
    
     -- Markus Koschany <email address hidden>  Tue, 27 Mar 2018 17:36:36 +0200
  • jackson-databind (2.9.4-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream version 2.9.4.
        - Fix CVE-2018-5968: bypass of deserialization blacklist related to
          CVE-2017-7525 and CVE-2017-17485. (Closes: #888316)
        - Fix CVE-2017-17485: unauthenticated remote code execution
          because of an incomplete fix for CVE-2017-7525. (Closes: #888318)
      * Use compat level 11.
      * Declare compliance with Debian Policy 4.1.3.
    
     -- Markus Koschany <email address hidden>  Thu, 25 Jan 2018 14:45:19 +0100
  • jackson-databind (2.9.1-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream version 2.9.1.
        - Fixes CVE-2017-7525: Deserialization vulnerability via readValue
          method of ObjectMapper (Closes: #870848)
        - Builds fine with Java 9. (Closes: #875411)
      * Declare compliance with Debian Policy 4.1.1.
      * Tighten B-D on jackson-core and jackson-annotations.
      * Add libmaven-shade-plugin-java to B-D.
    
     -- Markus Koschany <email address hidden>  Thu, 12 Oct 2017 00:31:43 +0200
  • jackson-databind (2.8.6-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release
    
     -- Emmanuel Bourg <email address hidden>  Mon, 16 Jan 2017 01:49:15 +0100