[bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

[bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

[Alex Vong]

Tags: security

Hello,

The following patch series updates all of the java-fasterxml-* packages
which include security fixes for java-fasterxml-jackson-databind.

Cheers,
Alex

[bug#30472] [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0001-gnu-java-fasterxml-jackson-annotations-Update-to-2.9.patch --]
[-- Type: text/x-diff, Size: 1338 bytes --]

From 6ebdd4abf565ee2006d81ea90cc0d536e0a911a0 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:18:56 +0800
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-annotations): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e714a031c..e8355e324 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6183,7 +6183,7 @@ the system under test at the same time.")
 (define-public java-fasterxml-jackson-annotations
   (package
     (name "java-fasterxml-jackson-annotations")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6191,7 +6191,7 @@ the system under test at the same time.")
                                   "jackson-annotations-" version ".tar.gz"))
               (sha256
                (base32
-                "0b4wdxjxfbl3gkilylfdbl7fzimfpyih676jiwdf19i4056j8lqw"))))
+                "0mr95xd0da6a4g95zvrl1ryk5n5zv2rc696w3xnsr5hxk2gicfc4"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-annotations.jar"
-- 
2.16.1

[bug#30472] [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0002-gnu-java-fasterxml-jackson-core-Update-to-2.9.4.patch --]
[-- Type: text/x-diff, Size: 1358 bytes --]

From 04a83abedc6b5ea11d115fa29f81ff806d71b289 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:26 +0800
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-core): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e8355e324..8aca53ca3 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6209,7 +6209,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-core
   (package
     (name "java-fasterxml-jackson-core")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6217,7 +6217,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-core-" version ".tar.gz"))
               (sha256
                (base32
-                "0q2d6qnylyxj5jh0sam1b095b5486f7ipzhxgwcgbm254ls7fqc1"))))
+                "159hsnk17jr1gyzkf01cxvsn45srnk37g949r7364qlsr527gjgd"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-core.jar"
-- 
2.16.1

[bug#30472] [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485, 2018-5968}].

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0003-gnu-java-fasterxml-jackson-databind-Update-to-2.9.4-.patch --]
[-- Type: text/x-diff, Size: 1418 bytes --]

From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
 [fixes CVE-{2017-17485,2018-5968}].

* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-databind
   (package
     (name "java-fasterxml-jackson-databind")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-databind-" version ".tar.gz"))
               (sha256
                (base32
-                "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+                "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-databind.jar"
-- 
2.16.1

[bug#30472] [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to 2.9.4.

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0004-gnu-java-fasterxml-jackson-modules-base-jaxb-Update-.patch --]
[-- Type: text/x-diff, Size: 1320 bytes --]

From 42c31e0578da43874ffcc44c89ca64a2d416dd6a Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:24:59 +0800
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-modules-base-jaxb): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e38614d9a..803bb7ea9 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6309,7 +6309,7 @@ configuration.")
 (define-public java-fasterxml-jackson-modules-base-jaxb
   (package
     (name "java-fasterxml-jackson-modules-base-jaxb")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6317,7 +6317,7 @@ configuration.")
                                   "jackson-modules-base-" version ".tar.gz"))
               (sha256
                (base32
-                "0kc19n5a188g4vpyay44xfb7qcabcbfnwzhx1g84lg0sac8lf0ng"))))
+                "1wws95xi8sppp6b0k2vvjdjyynl20r1a4dwrhai08lzlria6blp5"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-modules-base-jaxb.jar"
-- 
2.16.1

[bug#30472] [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to 2.9.4.

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0005-gnu-java-fasterxml-jackson-dataformat-yaml-Update-to.patch --]
[-- Type: text/x-diff, Size: 1314 bytes --]

From 89e572824ec7a1d10a6ba417540ac57558aef692 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:25:31 +0800
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-yaml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 803bb7ea9..ad93722db 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6379,7 +6379,7 @@ configuration.")
 (define-public java-fasterxml-jackson-dataformat-yaml
   (package
     (name "java-fasterxml-jackson-dataformat-yaml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6387,7 +6387,7 @@ configuration.")
                                   "jackson-dataformats-text-" version ".tar.gz"))
               (sha256
                (base32
-                "1x7c7v201jpb8ynjsmmq7jj7hyqzzp39jvpr053ggdndm022yzc7"))))
+                "1hikl06khaxbg439avf442qifcadap8w0lx13f0nnhp2vh3dkbz7"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-yaml.jar"
-- 
2.16.1

[bug#30472] [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to 2.9.4.

[Alex Vong]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: 0006-gnu-java-fasterxml-jackson-dataformat-xml-Update-to-.patch --]
[-- Type: text/x-diff, Size: 1375 bytes --]

From acb702101c82cbe71bb57f3407d9c0f1ca8f4323 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:26:02 +0800
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-xml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index ad93722db..5c505fde1 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6488,7 +6488,7 @@ interface and high-performance Typed Access API.")
 (define-public java-fasterxml-jackson-dataformat-xml
   (package
     (name "java-fasterxml-jackson-dataformat-xml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6496,7 +6496,7 @@ interface and high-performance Typed Access API.")
                                   "jackson-dataformat-xml-" version ".tar.gz"))
               (sha256
                (base32
-                "1j1qanvcdh6afagr67zqrlypjkf0n6wr1qzpbvkw79lii72j6pbr"))))
+                "111fkkl90w31jbf30kgj82qdcxlw4sxppki7i198liw0ck1jcavq"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-xml.jar"
-- 
2.16.1

bug#30472: [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 321 bytes --]

On Fri, Feb 16, 2018 at 05:34:36AM +0800, Alex Vong wrote:
> Tags: security
> 
> Hello,
> 
> The following patch series updates all of the java-fasterxml-* packages
> which include security fixes for java-fasterxml-jackson-databind.

Thank you!

I pushed the series as f3bbe0291b535f21cc0261bd7c5cce4b5594a1f0

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]