GNU bug report logs -
#30472
[PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.
Previous Next
Reported by: Alex Vong <alexvong1995 <at> gmail.com>
Date: Thu, 15 Feb 2018 21:36:02 UTC
Severity: normal
Tags: patch, security
Done: Leo Famulari <leo <at> famulari.name>
Bug is archived. No further changes may be made.
Full log
Message #20 received at 30472 <at> debbugs.gnu.org (full text, mbox):
[0003-gnu-java-fasterxml-jackson-databind-Update-to-2.9.4-.patch (text/x-diff, inline)]
From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995 <at> gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
[fixes CVE-{2017-17485,2018-5968}].
* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
(define-public java-fasterxml-jackson-databind
(package
(name "java-fasterxml-jackson-databind")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
"jackson-databind-" version ".tar.gz"))
(sha256
(base32
- "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+ "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-databind.jar"
--
2.16.1
This bug report was last modified 7 years and 183 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.