This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind.
commit 2ffd8c425cd63558379411995029fcf19b62aaac Author: Markus Koschany <[email protected]> Date: Thu Jan 25 14:50:03 2018 +0100 Update changelog --- debian/changelog | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/debian/changelog b/debian/changelog index 293d5ef..121d2a0 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,16 @@ +jackson-databind (2.9.4-1) unstable; urgency=medium + + * Team upload. + * New upstream version 2.9.4. + - Fix CVE-2018-5968: bypass of deserialization blacklist related to + CVE-2017-7525 and CVE-2017-17485. (Closes: #888316) + - Fix CVE-2017-17485: unauthenticated remote code execution + because of an incomplete fix for CVE-2017-7525. (Closes: #888318) + * Use compat level 11. + * Declare compliance with Debian Policy 4.1.3. + + -- Markus Koschany <[email protected]> Thu, 25 Jan 2018 14:45:19 +0100 + jackson-databind (2.9.1-1) unstable; urgency=medium * Team upload. -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/jackson-databind.git _______________________________________________ pkg-java-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits
