GNU bug report logs - #30472
[PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 30472 in the body.
You can then email your comments to 30472 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: guix-patches <at> gnu.org
Subject: [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:34:36 +0800

Tags: security

Hello,

The following patch series updates all of the java-fasterxml-* packages
which include security fixes for java-fasterxml-jackson-databind.

Cheers,
Alex

Message #14 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:46:06 +0800

[0001-gnu-java-fasterxml-jackson-annotations-Update-to-2.9.patch (text/x-diff, inline)]

From 6ebdd4abf565ee2006d81ea90cc0d536e0a911a0 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:18:56 +0800
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-annotations): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e714a031c..e8355e324 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6183,7 +6183,7 @@ the system under test at the same time.")
 (define-public java-fasterxml-jackson-annotations
   (package
     (name "java-fasterxml-jackson-annotations")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6191,7 +6191,7 @@ the system under test at the same time.")
                                   "jackson-annotations-" version ".tar.gz"))
               (sha256
                (base32
-                "0b4wdxjxfbl3gkilylfdbl7fzimfpyih676jiwdf19i4056j8lqw"))))
+                "0mr95xd0da6a4g95zvrl1ryk5n5zv2rc696w3xnsr5hxk2gicfc4"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-annotations.jar"
-- 
2.16.1

Message #17 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:46:31 +0800

[0002-gnu-java-fasterxml-jackson-core-Update-to-2.9.4.patch (text/x-diff, inline)]

From 04a83abedc6b5ea11d115fa29f81ff806d71b289 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:19:26 +0800
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-core): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e8355e324..8aca53ca3 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6209,7 +6209,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-core
   (package
     (name "java-fasterxml-jackson-core")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6217,7 +6217,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-core-" version ".tar.gz"))
               (sha256
                (base32
-                "0q2d6qnylyxj5jh0sam1b095b5486f7ipzhxgwcgbm254ls7fqc1"))))
+                "159hsnk17jr1gyzkf01cxvsn45srnk37g949r7364qlsr527gjgd"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-core.jar"
-- 
2.16.1

Message #20 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
 [fixes CVE-{2017-17485, 2018-5968}].
Date: Fri, 16 Feb 2018 05:49:06 +0800

[0003-gnu-java-fasterxml-jackson-databind-Update-to-2.9.4-.patch (text/x-diff, inline)]

From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
 [fixes CVE-{2017-17485,2018-5968}].

* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-databind
   (package
     (name "java-fasterxml-jackson-databind")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-databind-" version ".tar.gz"))
               (sha256
                (base32
-                "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+                "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-databind.jar"
-- 
2.16.1

Message #23 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
 2.9.4.
Date: Fri, 16 Feb 2018 05:49:53 +0800

[0004-gnu-java-fasterxml-jackson-modules-base-jaxb-Update-.patch (text/x-diff, inline)]

From 42c31e0578da43874ffcc44c89ca64a2d416dd6a Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:24:59 +0800
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-modules-base-jaxb): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e38614d9a..803bb7ea9 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6309,7 +6309,7 @@ configuration.")
 (define-public java-fasterxml-jackson-modules-base-jaxb
   (package
     (name "java-fasterxml-jackson-modules-base-jaxb")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6317,7 +6317,7 @@ configuration.")
                                   "jackson-modules-base-" version ".tar.gz"))
               (sha256
                (base32
-                "0kc19n5a188g4vpyay44xfb7qcabcbfnwzhx1g84lg0sac8lf0ng"))))
+                "1wws95xi8sppp6b0k2vvjdjyynl20r1a4dwrhai08lzlria6blp5"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-modules-base-jaxb.jar"
-- 
2.16.1

Message #26 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
 2.9.4.
Date: Fri, 16 Feb 2018 05:50:15 +0800

[0005-gnu-java-fasterxml-jackson-dataformat-yaml-Update-to.patch (text/x-diff, inline)]

From 89e572824ec7a1d10a6ba417540ac57558aef692 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:25:31 +0800
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-yaml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 803bb7ea9..ad93722db 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6379,7 +6379,7 @@ configuration.")
 (define-public java-fasterxml-jackson-dataformat-yaml
   (package
     (name "java-fasterxml-jackson-dataformat-yaml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6387,7 +6387,7 @@ configuration.")
                                   "jackson-dataformats-text-" version ".tar.gz"))
               (sha256
                (base32
-                "1x7c7v201jpb8ynjsmmq7jj7hyqzzp39jvpr053ggdndm022yzc7"))))
+                "1hikl06khaxbg439avf442qifcadap8w0lx13f0nnhp2vh3dkbz7"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-yaml.jar"
-- 
2.16.1

Message #29 received at 30472 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: 30472 <at> debbugs.gnu.org
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
 2.9.4.
Date: Fri, 16 Feb 2018 05:51:00 +0800

[0006-gnu-java-fasterxml-jackson-dataformat-xml-Update-to-.patch (text/x-diff, inline)]

From acb702101c82cbe71bb57f3407d9c0f1ca8f4323 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:26:02 +0800
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-xml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index ad93722db..5c505fde1 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6488,7 +6488,7 @@ interface and high-performance Typed Access API.")
 (define-public java-fasterxml-jackson-dataformat-xml
   (package
     (name "java-fasterxml-jackson-dataformat-xml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6496,7 +6496,7 @@ interface and high-performance Typed Access API.")
                                   "jackson-dataformat-xml-" version ".tar.gz"))
               (sha256
                (base32
-                "1j1qanvcdh6afagr67zqrlypjkf0n6wr1qzpbvkw79lii72j6pbr"))))
+                "111fkkl90w31jbf30kgj82qdcxlw4sxppki7i198liw0ck1jcavq"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-xml.jar"
-- 
2.16.1

Message #34 received at 30472-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 30472-done <at> debbugs.gnu.org
Subject: Re: [bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations:
 Update to 2.9.4.
Date: Thu, 15 Feb 2018 17:20:34 -0500

[Message part 1 (text/plain, inline)]

On Fri, Feb 16, 2018 at 05:34:36AM +0800, Alex Vong wrote:
> Tags: security
> 
> Hello,
> 
> The following patch series updates all of the java-fasterxml-* packages
> which include security fixes for java-fasterxml-jackson-databind.

Thank you!

I pushed the series as f3bbe0291b535f21cc0261bd7c5cce4b5594a1f0

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.