[bts-link] source package src:jackson-databind

bts-link-upstream at lists.alioth.debian.org bts-link-upstream at lists.alioth.debian.org
Mon Mar 5 17:18:50 UTC 2018


#
# bts-link upstream status pull for source package src:jackson-databind
# see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
#

user bts-link-upstream at lists.alioth.debian.org

# remote status report for #891614 (http://bugs.debian.org/891614)
# Bug title: jackson-databind: CVE-2018-7489: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
#  * https://github.com/FasterXML/jackson-databind/issues/1931
#  * remote status changed: (?) -> closed
#  * closed upstream
tags 891614 + fixed-upstream
usertags 891614 + status-closed

thanks



More information about the pkg-java-maintainers mailing list