jackson-databind 2.13.2.2-1 source package in Ubuntu

Changelog

jackson-databind (2.13.2.2-1) unstable; urgency=medium

  * New upstream version 2.13.2.2.
    - Fix CVE-2020-36518: Java StackOverflow exception and denial of service
      via a large depth of nested objects. (Closes: #1007109)
      Thanks to Neil Williams for the report.

 -- Markus Koschany <email address hidden>  Sat, 30 Apr 2022 14:05:08 +0200

Upload details

Uploaded by:
Debian Java Maintainers
Uploaded to:
Sid
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Kinetic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
jackson-databind_2.13.2.2-1.dsc 2.4 KiB 2d363dcdac738fae308f592a225e062554b54216da7aca47d881683fe8f6fa90
jackson-databind_2.13.2.2.orig.tar.xz 1.0 MiB c25b021c193e7993e201604fa3da6f23572344e8d38ef72974badfbd8e5b800b
jackson-databind_2.13.2.2-1.debian.tar.xz 5.3 KiB 8f6639770f6019eb840d6875daf4b4933e9e347ac902871d01201082dbacb7d5

Available diffs

No changes file available.

Binary packages built by this source

libjackson2-databind-java: fast and powerful JSON library for Java -- data binding

 The Jackson Data Processor is a multi-purpose Java library for processing
 JSON. Jackson aims to be the best possible combination of fast, correct,
 lightweight, and ergonomic for developers. It offers three alternative methods
 for processing JSON:
 .
  * Streaming API inspired by StAX
  * Tree Model
  * Data Binding converts JSON to and from POJOs
 .
 In addition to the core library, there are numerous extension that provide
 additional functionality such as additional data formats beyond JSON,
 additional data types or JVM languages.
 .
 This package contains general purpose data-binding functionality for data
 formats other than JSON.