[bts-link] source package src:jackson-databind
bts-link-upstream at lists.alioth.debian.org
bts-link-upstream at lists.alioth.debian.org
Mon Mar 5 17:18:50 UTC 2018
#
# bts-link upstream status pull for source package src:jackson-databind
# see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
#
user bts-link-upstream at lists.alioth.debian.org
# remote status report for #891614 (http://bugs.debian.org/891614)
# Bug title: jackson-databind: CVE-2018-7489: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
# * https://github.com/FasterXML/jackson-databind/issues/1931
# * remote status changed: (?) -> closed
# * closed upstream
tags 891614 + fixed-upstream
usertags 891614 + status-closed
thanks
More information about the pkg-java-maintainers
mailing list