Bug#888316: marked as done (jackson-databind: CVE-2018-5968)

Your message dated Thu, 25 Jan 2018 23:19:37 + with message-id and subject line Bug#888316: fixed in jackson-databind 2.9.4-1 has caused the Debian Bug report #888316, regarding jackson-databind: CVE-2018-5968 to be marked as done. This means that you claim that the problem has been dealt wit

Bug#888318: marked as done (jackson-databind: CVE-2017-17485)

Your message dated Thu, 25 Jan 2018 23:19:37 + with message-id and subject line Bug#888318: fixed in jackson-databind 2.9.4-1 has caused the Debian Bug report #888318, regarding jackson-databind: CVE-2017-17485 to be marked as done. This means that you claim that the problem has been dealt wi

jackson-databind_2.9.4-1_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2018 14:45:19 +0100 Source: jackson-databind Binary: libjackson2-databind-java libjackson2-databind-java-doc Architecture: source Version: 2.9.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Ja

[jackson-annotations] 01/01: pristine-tar data for jackson-annotations_2.9.4.orig.tar.gz

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch pristine-tar in repository jackson-annotations. commit 779be058f68be5d0bcba7d52ad0d692d21c67aa1 Author: Markus Koschany Date: Thu Jan 25 23:38:20 2018 +0100 pristine-tar data for jackson-annot

[jackson-annotations] 02/05: Declare compliance with Debian Policy 4.1.3.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-annotations. commit 4591ae44982a65b38e792d8f07badd5eaef5b98b Author: Markus Koschany Date: Thu Jan 25 23:36:02 2018 +0100 Declare compliance with Debian Policy 4.1

[jackson-annotations] 01/05: Use compat level 11.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-annotations. commit 360aee67dbf9a789510e14f762b3d7944d9d9dec Author: Markus Koschany Date: Thu Jan 25 23:35:48 2018 +0100 Use compat level 11. --- debian/compat

[jackson-annotations] branch master updated (5f7af22 -> 8625785)

This is an automated email from the git hooks/post-receive script. apo pushed a change to branch master in repository jackson-annotations. from 5f7af22 Update changelog new 360aee6 Use compat level 11. new 4591ae4 Declare compliance with Debian Policy 4.1.3. add

[jackson-annotations] 03/05: Update upstream source from tag 'upstream/2.9.4'

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-annotations. commit 32304db7d3817f1cf7d78d122eb81ba4501fb240 Merge: 4591ae4 c9c6447 Author: Markus Koschany Date: Thu Jan 25 23:38:25 2018 +0100 Update upstream so

[jackson-annotations] 04/05: Update changelog

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-annotations. commit bccf0c4ce72e17e2cd3fa34965b3c2ac1d92568f Author: Markus Koschany Date: Thu Jan 25 23:39:51 2018 +0100 Update changelog --- debian/changelog |

[jackson-annotations] 05/05: Remove empty maven.ignoreRules file.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-annotations. commit 8625785ceb5236fe7364ccf7091526227d63b131 Author: Markus Koschany Date: Thu Jan 25 23:41:34 2018 +0100 Remove empty maven.ignoreRules file. ---

[jackson-annotations] branch pristine-tar updated (06e3914 -> 779be05)

This is an automated email from the git hooks/post-receive script. apo pushed a change to branch pristine-tar in repository jackson-annotations. from 06e3914 pristine-tar data for jackson-annotations_2.9.1.orig.tar.gz new 779be05 pristine-tar data for jackson-annotations_2.9.

Processing of jackson-databind_2.9.4-1_source.changes

jackson-databind_2.9.4-1_source.changes uploaded successfully to localhost along with the files: jackson-databind_2.9.4-1.dsc jackson-databind_2.9.4.orig.tar.gz jackson-databind_2.9.4-1.debian.tar.xz jackson-databind_2.9.4-1_amd64.buildinfo Greetings, Your Debian queue daemon (run

jackson-annotations_2.9.4-1_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2018 23:38:58 +0100 Source: jackson-annotations Binary: libjackson2-annotations-java libjackson2-annotations-java-doc Architecture: source Version: 2.9.4-1 Distribution: unstable Urgency: medium Maintainer:

[jackson-databind] annotated tag upstream/2.9.4 created (now 885439b)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag upstream/2.9.4 in repository jackson-databind. at 885439b (tag) tagging de050fc977234ca3f53e42872f0208eed5f845a0 (commit) replaces upstream/2.9.1 tagged by Markus Koschany

[jackson-databind] annotated tag debian/2.9.4-1 created (now 42eb2bf)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag debian/2.9.4-1 in repository jackson-databind. at 42eb2bf (tag) tagging 9c850391bbf0564a6c86e4e63296635f6ac5dc4c (commit) replaces debian/2.9.1-1 tagged by Markus Koschany

[jackson-databind] 07/07: Fix new name of upstream changelog file.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit 9c850391bbf0564a6c86e4e63296635f6ac5dc4c Author: Markus Koschany Date: Thu Jan 25 23:10:31 2018 +0100 Fix new name of upstream changelog file. ---

[jackson-databind] 04/07: Update changelog

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit 2ffd8c425cd63558379411995029fcf19b62aaac Author: Markus Koschany Date: Thu Jan 25 14:50:03 2018 +0100 Update changelog --- debian/changelog | 13

[jackson-databind] 01/01: pristine-tar data for jackson-databind_2.9.4.orig.tar.gz

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch pristine-tar in repository jackson-databind. commit 12a24ae3d7017e48c4e072a82df98135543046b5 Author: Markus Koschany Date: Thu Jan 25 14:43:06 2018 +0100 pristine-tar data for jackson-databind

[jackson-databind] branch master updated (5020074 -> 9c85039)

This is an automated email from the git hooks/post-receive script. apo pushed a change to branch master in repository jackson-databind. from 5020074 Use https for Format field. new 3a6d58e Use compat level 11. new 62181b1 Declare compliance with Debian Policy 4.1.3.

[jackson-databind] 03/07: Update upstream source from tag 'upstream/2.9.4'

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit c6ad33db617c5ffbce1f8a656d3a5914b33928d5 Merge: 62181b1 de050fc Author: Markus Koschany Date: Thu Jan 25 14:43:11 2018 +0100 Update upstream sourc

[jackson-databind] 01/07: Use compat level 11.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit 3a6d58eca5091304761a109c32c65eccd4d8a7c9 Author: Markus Koschany Date: Thu Jan 25 14:41:06 2018 +0100 Use compat level 11. --- debian/compat | 2

[jackson-databind] branch pristine-tar updated (31ceedc -> 12a24ae)

This is an automated email from the git hooks/post-receive script. apo pushed a change to branch pristine-tar in repository jackson-databind. from 31ceedc pristine-tar data for jackson-databind_2.9.1.orig.tar.gz new 12a24ae pristine-tar data for jackson-databind_2.9.4.orig.tar.

[jackson-databind] 05/07: Tighten B-D on libjackson2-core-java.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit 746b64ede0a0cbcff9f3ddca8f78b7aaac757382 Author: Markus Koschany Date: Thu Jan 25 20:00:19 2018 +0100 Tighten B-D on libjackson2-core-java. --- d

[jackson-databind] 02/07: Declare compliance with Debian Policy 4.1.3.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit 62181b1e03fe9a51483e0b765a58cc05537c23e4 Author: Markus Koschany Date: Thu Jan 25 14:41:19 2018 +0100 Declare compliance with Debian Policy 4.1.3.

[jackson-databind] 06/07: Build-Depend on libmaven-enforcer-plugin-java.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-databind. commit f8e2c5d11fb219a0843289dc9477351cdb795a7a Author: Markus Koschany Date: Thu Jan 25 21:40:20 2018 +0100 Build-Depend on libmaven-enforcer-plugin-jav

Processing of jackson-annotations_2.9.4-1_source.changes

jackson-annotations_2.9.4-1_source.changes uploaded successfully to localhost along with the files: jackson-annotations_2.9.4-1.dsc jackson-annotations_2.9.4.orig.tar.gz jackson-annotations_2.9.4-1.debian.tar.xz jackson-annotations_2.9.4-1_amd64.buildinfo Greetings, Your Debian qu

[jackson-annotations] annotated tag debian/2.9.4-1 created (now 6ebc23a)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag debian/2.9.4-1 in repository jackson-annotations. at 6ebc23a (tag) tagging 8625785ceb5236fe7364ccf7091526227d63b131 (commit) replaces debian/2.9.1-1 tagged by Markus Koschan

[jackson-annotations] annotated tag upstream/2.9.4 created (now ef4ad6c)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag upstream/2.9.4 in repository jackson-annotations. at ef4ad6c (tag) tagging c9c6447cf3db2d6fa45836b9a7a240ac83f4426d (commit) replaces upstream/2.9.1 tagged by Markus Koschan

jackson-core_2.9.4-1_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2018 23:18:08 +0100 Source: jackson-core Binary: libjackson2-core-java libjackson2-core-java-doc Architecture: source Version: 2.9.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintaine

Processing of jackson-core_2.9.4-1_source.changes

jackson-core_2.9.4-1_source.changes uploaded successfully to localhost along with the files: jackson-core_2.9.4-1.dsc jackson-core_2.9.4.orig.tar.gz jackson-core_2.9.4-1.debian.tar.xz jackson-core_2.9.4-1_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.d

[jackson-core] annotated tag upstream/2.9.4 created (now a49c96f)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag upstream/2.9.4 in repository jackson-core. at a49c96f (tag) tagging 2cda2577744d5266ba6b8603f04437a3a16adeb4 (commit) replaces upstream/2.9.1 tagged by Markus Koschany

[jackson-core] 19/19: Update changelog

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 52a158de68ce6e4f51ead20a85fd199ffc4e9033 Author: Markus Koschany Date: Thu Jan 25 23:18:11 2018 +0100 Update changelog --- debian/changelog | 4 ++--

[jackson-core] 08/19: Add no-bundle.patch

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 3d6add0e48b6fe4854511858f893ed797bd9eec8 Author: Markus Koschany Date: Thu Jan 25 18:19:41 2018 +0100 Add no-bundle.patch --- debian/patches/no-bundl

[jackson-core] 12/19: Update changelog

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 5df9602977a90f3bb3416ebd4143c3208a3af29d Author: Markus Koschany Date: Thu Jan 25 19:48:05 2018 +0100 Update changelog --- debian/changelog | 1 + 1

[jackson-core] 15/19: Add maven-enforcer.patch

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 79f99d1cfa14d05f86679a2a7cf9425cdbd956ae Author: Markus Koschany Date: Thu Jan 25 22:36:41 2018 +0100 Add maven-enforcer.patch --- debian/patches/mav

[jackson-core] 13/19: Remove maven-enforcer-plugin from Ignore

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 10e38a9ec7d9a29eae3b2a8527096d0ad4e5052b Author: Markus Koschany Date: Thu Jan 25 22:25:39 2018 +0100 Remove maven-enforcer-plugin from Ignore --- de

[jackson-core] 07/19: Drop fix-using-bundle.patch

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 6a3b996063f2df7e53339e0dc33f0aa1810a5064 Author: Markus Koschany Date: Thu Jan 25 18:05:03 2018 +0100 Drop fix-using-bundle.patch --- debian/changelo

[jackson-core] 05/19: Update upstream source from tag 'upstream/2.9.4'

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 729b68707d93cc4bb0084a49caa7f08cdf6b7671 Merge: a11aff2 2cda257 Author: Markus Koschany Date: Thu Jan 25 18:02:54 2018 +0100 Update upstream source fr

[jackson-core] 14/19: Build-Depend on libmaven-enforcer-plugin-java.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit c022e67140e4926def0999f44f2b8c3bbac64497 Author: Markus Koschany Date: Thu Jan 25 22:27:17 2018 +0100 Build-Depend on libmaven-enforcer-plugin-java. -

[jackson-core] 10/19: Update patch header

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 6b358f9a65bcb61cabc130a896e739c2a9528693 Author: Markus Koschany Date: Thu Jan 25 18:38:12 2018 +0100 Update patch header --- debian/patches/junit.pa

[jackson-core] 04/19: Install jackson-base-2.9.4.pom which is required by other jackson projects.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit a11aff2495be80c0817eb06a49a5a7b3a13224b3 Author: Markus Koschany Date: Thu Jan 25 18:01:32 2018 +0100 Install jackson-base-2.9.4.pom which is required

[jackson-core] 06/19: Update changelog

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit bf7168dd97653245e4ad1b44609c64d4367f1682 Author: Markus Koschany Date: Thu Jan 25 18:04:01 2018 +0100 Update changelog --- debian/changelog | 11

[jackson-core] 17/19: Remove strict version rule from pom files.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit bf196b1194a16ce7840755390bbb19a27e685230 Author: Markus Koschany Date: Thu Jan 25 23:03:57 2018 +0100 Remove strict version rule from pom files. ---

[jackson-core] 03/19: Update jackson-bom pom.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit b9cb1628f7e853bbbce7fb8812b8950c1f1c52dc Author: Markus Koschany Date: Thu Jan 25 17:57:13 2018 +0100 Update jackson-bom pom. --- debian/{jackson-bom

[jackson-core] 11/19: Update junit.patch

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 13ff1c563274a26b701a0861b8dfdfb0b73084bb Author: Markus Koschany Date: Thu Jan 25 19:47:26 2018 +0100 Update junit.patch --- debian/patches/junit.pat

[jackson-core] 16/19: Remove requirePluginVersion rule to prevent a FTBFS in reverse-dependencies.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 5b2dea9cb8502cb4412668b4d788d3afc2b8577d Author: Markus Koschany Date: Thu Jan 25 22:43:13 2018 +0100 Remove requirePluginVersion rule to prevent a FT

[jackson-core] annotated tag debian/2.9.4-1 created (now 6dc9eec)

This is an automated email from the git hooks/post-receive script. apo pushed a change to annotated tag debian/2.9.4-1 in repository jackson-core. at 6dc9eec (tag) tagging 52a158de68ce6e4f51ead20a85fd199ffc4e9033 (commit) replaces debian/2.9.1-1 tagged by Markus Koschany

[jackson-core] 18/19: Update patch header

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 58ed3ad729797ee1316fa7713af552a6e1a64a77 Author: Markus Koschany Date: Thu Jan 25 23:17:36 2018 +0100 Update patch header --- debian/patches/junit.pa

[jackson-core] 09/19: Add junit.patch

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit e3ba632a593d2bbfab92aab4cb722bce730a24c7 Author: Markus Koschany Date: Thu Jan 25 18:34:36 2018 +0100 Add junit.patch --- debian/patches/junit.patch

[jackson-core] 02/19: Declare compliance with Debian Policy 4.1.3.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit b6c158e4740edc2917db55f7bef9d98bac4fbf17 Author: Markus Koschany Date: Thu Jan 25 17:52:24 2018 +0100 Declare compliance with Debian Policy 4.1.3. ---

[jackson-core] branch master updated (4401295 -> 52a158d)

This is an automated email from the git hooks/post-receive script. apo pushed a change to branch master in repository jackson-core. from 4401295 Fix the artifactid for replacer plugin. new 0212548 Use compat level 11. new b6c158e Declare compliance with Debian Policy

[jackson-core] 01/19: Use compat level 11.

This is an automated email from the git hooks/post-receive script. apo pushed a commit to branch master in repository jackson-core. commit 0212548995eadd3763a8a3bd73685f7594c05f3e Author: Markus Koschany Date: Thu Jan 25 17:45:46 2018 +0100 Use compat level 11. --- debian/compat | 2 +-

Bug#888316: jackson-databind: CVE-2018-5968

Hi Markus, On Thu, Jan 25, 2018 at 02:40:10PM +0100, Markus Koschany wrote: > Hi, > > On Wed, 24 Jan 2018 23:02:44 +0100 Salvatore Bonaccorso > wrote: > > Source: jackson-databind > > Version: 2.9.1-1 > > Severity: grave > > Tags: patch security upstream > > Forwarded: https://github.com/FasterX

Bug#888316: jackson-databind: CVE-2018-5968

Hi, On Wed, 24 Jan 2018 23:02:44 +0100 Salvatore Bonaccorso wrote: > Source: jackson-databind > Version: 2.9.1-1 > Severity: grave > Tags: patch security upstream > Forwarded: https://github.com/FasterXML/jackson-databind/issues/1899 > Control: found -1 2.8.6-1+deb9u2 > Control: found -1 2.4.2-2+