Ubuntu
libjettison-java package

Change logs for libjettison-java source package in Kinetic

  1. Kinetic (22.10)
  2. Change log 
  • libjettison-java (1.4.1-1ubuntu0.22.10.2) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2023-1436.patch: fixed a stack overflow in JSONArray
      function.
    - CVE-2023-1436

 -- Amir Naseredini <email address hidden>  Tue, 20 Jun 2023 09:26:17 +0100
  • libjettison-java (1.4.1-1ubuntu0.22.10.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2022-40149.patch: fixed a denial of service in
      nextClean function.
    - debian/patches/CVE-2022-40150-[1-4].patch: fixed multiple cases of
      denial of service from CVE-2022-40150, CVE-2022-45685, and
      CVE-2022-45693.
    - CVE-2022-40149
    - CVE-2022-40150
    - CVE-2022-45685
    - CVE-2022-45693

 -- Amir Naseredini <email address hidden>  Thu, 15 Jun 2023 17:25:10 +0100
  • libjettison-java (1.4.1-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Standards-Version updated to 4.5.1
  * Switch to debhelper level 13
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <email address hidden>  Mon, 18 Jan 2021 00:14:42 +0100