jackson-databind (2.2.2-1ubuntu0.1~esm1) trusty-security; urgency=medium

  * SECURITY UPDATE: Code execution in readValue()
    - debian/patches/CVE-2017-7525.patch: Create blacklist of class types and
      add check for such illegal types.
    - debian/patches/CVE-2017-15095-1.patch: Extend blacklist of class types.
    - debian/patches/CVE-2017-15095-2.patch: Extend blacklist of class types.
    - debian/patches/CVE-2017-15095-3.patch: Extend blacklist of class types
      and improve IllegalTypesCheckTest.
    - debian/patches/CVE-2017-17485-1.patch: Extend blacklist of class types
      and fix IllegalTypesCheckTest.
    - debian/patches/CVE-2017-17485-2.patch: Move blacklist and check for
      illegal types to its own class.
    - debian/patches/CVE-2017-17485-3.patch: Fix errors on previous patch.
    - debian/patches/CVE-2017-17485-4.patch: Fix regression from previous
      patch.
    - debian/patches/CVE-2018-5968.patch: Add some more class types to
      blacklist.
    - debian/patches/CVE-2018-7489.patch: Extend blacklist types and improve
      IllegalTypesCheckTest.
    - CVE-2017-7525
    - CVE-2017-15095
    - CVE-2017-17485
    - CVE-2018-5968
    - CVE-2018-7489

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Tue, 28 Jan 2020 11:34:56 -0300

jackson-databind (2.2.2-1) unstable; urgency=low

  * Initial release. (Closes: #720504)

 -- Wolodja Wentland <debian@babilen5.org>  Thu, 22 Aug 2013 15:24:34 +0000
