[jackson-databind] 04/07: Update changelog
Markus Koschany
apo at moszumanska.debian.org
Thu Jan 25 22:58:49 UTC 2018
This is an automated email from the git hooks/post-receive script.
apo pushed a commit to branch master
in repository jackson-databind.
commit 2ffd8c425cd63558379411995029fcf19b62aaac
Author: Markus Koschany <apo at debian.org>
Date: Thu Jan 25 14:50:03 2018 +0100
Update changelog
---
debian/changelog | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index 293d5ef..121d2a0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+jackson-databind (2.9.4-1) unstable; urgency=medium
+
+ * Team upload.
+ * New upstream version 2.9.4.
+ - Fix CVE-2018-5968: bypass of deserialization blacklist related to
+ CVE-2017-7525 and CVE-2017-17485. (Closes: #888316)
+ - Fix CVE-2017-17485: unauthenticated remote code execution
+ because of an incomplete fix for CVE-2017-7525. (Closes: #888318)
+ * Use compat level 11.
+ * Declare compliance with Debian Policy 4.1.3.
+
+ -- Markus Koschany <apo at debian.org> Thu, 25 Jan 2018 14:45:19 +0100
+
jackson-databind (2.9.1-1) unstable; urgency=medium
* Team upload.
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/jackson-databind.git
More information about the pkg-java-commits
mailing list