From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:51975) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1emRPq-0004Sz-E4 for guix-patches@gnu.org; Thu, 15 Feb 2018 16:50:07 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1emRPn-0006yA-B7 for guix-patches@gnu.org; Thu, 15 Feb 2018 16:50:06 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:37315) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1emRPn-0006xo-6l for guix-patches@gnu.org; Thu, 15 Feb 2018 16:50:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1emRPm-0001z8-Li for guix-patches@gnu.org; Thu, 15 Feb 2018 16:50:02 -0500 Subject: [bug#30472] [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485, 2018-5968}]. References: <87d116ndhv.fsf@gmail.com> In-Reply-To: <87d116ndhv.fsf@gmail.com> Resent-Message-ID: From: Alex Vong Date: Fri, 16 Feb 2018 05:49:06 +0800 Message-ID: <87o9kpnctp.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/x-diff Content-Disposition: inline; filename=0003-gnu-java-fasterxml-jackson-databind-Update-to-2.9.4-.patch List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 30472@debbugs.gnu.org >From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001 From: Alex Vong Date: Fri, 16 Feb 2018 05:19:57 +0800 Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485,2018-5968}]. * gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4. --- gnu/packages/java.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm index 8aca53ca3..e38614d9a 100644 --- a/gnu/packages/java.scm +++ b/gnu/packages/java.scm @@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.") (define-public java-fasterxml-jackson-databind (package (name "java-fasterxml-jackson-databind") - (version "2.9.2") + (version "2.9.4") (source (origin (method url-fetch) (uri (string-append "https://github.com/FasterXML/" @@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.") "jackson-databind-" version ".tar.gz")) (sha256 (base32 - "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w")))) + "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08")))) (build-system ant-build-system) (arguments `(#:jar-name "jackson-databind.jar" -- 2.16.1