Accepted libjackson-json-java 1.9.13-2~deb10u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Jan 2022 14:04:02 +0200
Source: libjackson-json-java
Architecture: source
Version: 1.9.13-2~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Changes:
libjackson-json-java (1.9.13-2~deb10u1) buster; urgency=medium
.
* Non-maintainer upload.
* Rebuild for buster.
- Revert the debhelper compat bump.
.
libjackson-json-java (1.9.13-2) unstable; urgency=medium
.
* Team upload.
* Add upstream fixes.
- Serializing types for deeply nested Maps.
- Set Secure Processing flag on DocumentBuilderFactory.
- Set setExpandEntityReferences(false). (Fixes: CVE-2019-10172)
- WriteRawValue surrogate pair fix.
- Fix deserialization.
- All known security fixes. (Fixes: CVE-2017-15095 and CVE-2017-7525)
* Update Standards-Version to 4.5.0
* Use debhelper-compat.
- Update compat level to 13.
Checksums-Sha1:
b3f14c369ac0c15dee173ffa8e8ca7ce1123c061 2428 libjackson-json-java_1.9.13-2~deb10u1.dsc
2c6702f1670624538988dc7f75526da01f2f9e28 10600 libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz
Checksums-Sha256:
c366cca12488ffd9580be0e676540bd5a550939ceb3116632ee19f60759a6980 2428 libjackson-json-java_1.9.13-2~deb10u1.dsc
90bf232c626e683d3d87a983f8d240bda66f1169ab8d2ec55bb1ba023ed33be2 10600 libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz
Files:
aaf0c3f1f74244520c63e8705e1de3a5 2428 java optional libjackson-json-java_1.9.13-2~deb10u1.dsc
3c8b9dcabcbcab4781bf36333ea7b16d 10600 java optional libjackson-json-java_1.9.13-2~deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmHkCwgACgkQiNJCh6LY
mLEBJxAAgIg5jKqwW2BD+SiZ7T7eYUzTd67M5rwcVANjGPcfkzg4ILLjImAb4ZeT
OqucFopeQn3s+VSZHDdECOVaRzrvIvDG+e0TSce/N30+eaj8AqwZC6zEIm/A037n
W+5dvj6VF6K2wEwmFR/lYG4ZiXHnvoEr9WrLoMD9agpG3IWP46f8CSfSPGBb3wuk
lpvOjJsXd/thUsGlwGNHtzD7me1z0luf2IkBec+A1RSHxUUR70Nu59L3dro3d9GJ
FpSIQKww6bCshc+Q9C20bdl7rfe5mXygpLPpSiS0vvImUOJoCy1wAwqpzm7jzGpM
u1XNsNGIMeXV/1yNTrTVCzLYmprpEtRoOIruVEJm/qzoXjbnuD21R9qxPt3qRAtl
7/7j6wwAzptZY+VOOXJXJPkV1FHHBNoPkxxwGCxxXGSNAlOsJL/sC3qVHMbNGay6
fVLmNxW2YOo07eTHEuHq5rpAE6K+17Kph1yW8WzYKoC1PxkU6MZcF7g+xjycM6Rr
W1RoQ/z3vao08c+k5MfJwt1adgJNsPcUtRJm5l9vaH6DaRIm0cFo8O8scXiIMLL1
TJdc+vGcvjbJyXnWoF9qpgFW9fW6Fhw4ScNWgb6d3oZ0vxEOedjc+R/E0RpRbvX7
PrwstrPidlksIVcyMjhrb2kMplfc90sIrXfXoHB/SDr1l4REPoE=
=mgis
-----END PGP SIGNATURE-----
Reply to: