libjackson-json-java (1.9.2-7ubuntu0.2) xenial-security; urgency=medium
* SECURITY UPDATE: Improper input sanitization
- debian/patches/CVE-2017-15095.patch: Fix deserialization.
- debian/patches/CVE-2017-7525.patch: Backport all known security
fixes from 2.x that were missing, related to public CVEs.
- debian/patches/CVE-2019-10172_1.patch: Set Secure Processing
flag on DocumentBuilderFactory.
- d/p/CVE-2019-10172_2.patch: setExpandEntityReferences(false).
- CVE-2017-7525
- CVE-2017-15095
- CVE-2019-10172
Date: 2021-02-18 16:36:09.453586+00:00
Changed-By: Paulo Flabiano Smorigo <[email protected]>
https://launchpad.net/ubuntu/+source/libjackson-json-java/1.9.2-7ubuntu0.2
Sorry, changesfile not available.
--
Xenial-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
