Ubuntu
libjackson-json-java package

libjackson-json-java 1.9.2-7ubuntu0.2 source package in Ubuntu

Changelog

libjackson-json-java (1.9.2-7ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Improper input sanitization
    - debian/patches/CVE-2017-15095.patch: Fix deserialization.
    - debian/patches/CVE-2017-7525.patch: Backport all known security
      fixes from 2.x that were missing, related to public CVEs.
    - debian/patches/CVE-2019-10172_1.patch: Set Secure Processing
      flag on DocumentBuilderFactory.
    - d/p/CVE-2019-10172_2.patch: setExpandEntityReferences(false).
    - CVE-2017-7525
    - CVE-2017-15095
    - CVE-2019-10172

 -- Paulo Flabiano Smorigo <email address hidden>  Thu, 18 Feb 2021 14:04:33 +0000

Upload details

Uploaded by:
Paulo Flabiano Smorigo
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates universe java
Xenial security universe java

Builds

Xenial: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libjackson-json-java_1.9.2.orig.tar.gz 1.1 MiB c384766381d06a8782cef33e8e9f3d296d62a68c6638d2080d1912842a1b9b16
libjackson-json-java_1.9.2-7ubuntu0.2.debian.tar.xz 8.4 KiB c2c02f9d1a8072e796c94e022556d99a5754d21706213687460ac4c43e837103
libjackson-json-java_1.9.2-7ubuntu0.2.dsc 2.5 KiB a1995b8d243dd765d4930daf4fe6a0c1bba66777288f537954a9a231c4ac8c88

View changes file

Binary packages built by this source

libjackson-json-java: streaming fast powerful standard conformant json processor in java

 Jackson is a Java-based JSON-processing package that contains:
 .
  * high-performance streaming JSON parser/generator
  * Tree Model that can be built from/written to parser/generator
  * Object Mapper that implements data binding to/from
  * parser/generator
 .
 API of streaming parser/generator is similar to Stax API used for
 efficient xml processing on Java platform.
 .
 Beyond VERY fast Json parser and generator, Jackson project also offers
 full data binding support through 2 different approaches: "Object
 Mapper" for full POJO to/from Json data mapping (similar to JAXB2) and
 "Tree Mapper" for something similar to DOM and XPath.

libjackson-json-java-doc: standard conformant json processor in java - API documentation

 Jackson is a Java-based JSON-processing package that contains:
 .
  * high-performance streaming JSON parser/generator
  * Tree Model that can be built from/written to parser/generator
  * Object Mapper that implements data binding to/from
  * parser/generator
 .
 API of streaming parser/generator is similar to Stax API used for
 efficient xml processing on Java platform.
 .
 Beyond VERY fast Json parser and generator, Jackson project also offers
 full data binding support through 2 different approaches: "Object
 Mapper" for full POJO to/from Json data mapping (similar to JAXB2) and
 "Tree Mapper" for something similar to DOM and XPath.
 .
 This package contains the api documentation.