[PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.

  • Done
  • quality assurance status badge
Details
2 participants
  • Alex Vong
  • Leo Famulari
Owner
unassigned
Submitted by
Alex Vong
Severity
normal

Debbugs page

A
A
Alex Vong wrote on 15 Feb 2018 13:34
[PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(address . guix-patches@gnu.org)
87d116ndhv.fsf@gmail.com
Tags: security

Hello,

The following patch series updates all of the java-fasterxml-* packages
which include security fixes for java-fasterxml-jackson-databind.

Cheers,
Alex
A
A
Alex Vong wrote on 15 Feb 2018 13:38
Fix title
(address . control@debbugs.gnu.org)
878tbundax.fsf@gmail.com
package guix-patches
retitle 30472 [PATCH 0/6] gnu: java-fasterxml-*
thanks
A
A
Alex Vong wrote on 15 Feb 2018 13:43
(name . GNU bug tracker automated control server)(address . control@debbugs.gnu.org)
871shmnd37.fsf@gmail.com
package guix-patches
retitle 30472 [PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.
tags 30472 patch
thanks
A
A
Alex Vong wrote on 15 Feb 2018 13:46
[PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87wozelye9.fsf@gmail.com
From 6ebdd4abf565ee2006d81ea90cc0d536e0a911a0 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:18:56 +0800
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-annotations): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e714a031c..e8355e324 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6183,7 +6183,7 @@ the system under test at the same time.")
(define-public java-fasterxml-jackson-annotations
(package
(name "java-fasterxml-jackson-annotations")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6191,7 +6191,7 @@ the system under test at the same time.")
"jackson-annotations-" version ".tar.gz"))
(sha256
(base32
- "0b4wdxjxfbl3gkilylfdbl7fzimfpyih676jiwdf19i4056j8lqw"))))
+ "0mr95xd0da6a4g95zvrl1ryk5n5zv2rc696w3xnsr5hxk2gicfc4"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-annotations.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 13:46
[PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87sha2lydk.fsf@gmail.com
From 04a83abedc6b5ea11d115fa29f81ff806d71b289 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:26 +0800
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-core): Update to 2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e8355e324..8aca53ca3 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6209,7 +6209,7 @@ not included are ones that require dependency to the Databind package.")
(define-public java-fasterxml-jackson-core
(package
(name "java-fasterxml-jackson-core")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6217,7 +6217,7 @@ not included are ones that require dependency to the Databind package.")
"jackson-core-" version ".tar.gz"))
(sha256
(base32
- "0q2d6qnylyxj5jh0sam1b095b5486f7ipzhxgwcgbm254ls7fqc1"))))
+ "159hsnk17jr1gyzkf01cxvsn45srnk37g949r7364qlsr527gjgd"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-core.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 13:49
[PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485, 2018-5968}].
(address . 30472@debbugs.gnu.org)
87o9kpnctp.fsf@gmail.com
From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
[fixes CVE-{2017-17485,2018-5968}].

* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
(define-public java-fasterxml-jackson-databind
(package
(name "java-fasterxml-jackson-databind")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
"jackson-databind-" version ".tar.gz"))
(sha256
(base32
- "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+ "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-databind.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 13:49
[PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87k1vdncse.fsf@gmail.com
From 42c31e0578da43874ffcc44c89ca64a2d416dd6a Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:24:59 +0800
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-modules-base-jaxb): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e38614d9a..803bb7ea9 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6309,7 +6309,7 @@ configuration.")
(define-public java-fasterxml-jackson-modules-base-jaxb
(package
(name "java-fasterxml-jackson-modules-base-jaxb")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6317,7 +6317,7 @@ configuration.")
"jackson-modules-base-" version ".tar.gz"))
(sha256
(base32
- "0kc19n5a188g4vpyay44xfb7qcabcbfnwzhx1g84lg0sac8lf0ng"))))
+ "1wws95xi8sppp6b0k2vvjdjyynl20r1a4dwrhai08lzlria6blp5"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-modules-base-jaxb.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 13:50
[PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87fu61ncrs.fsf@gmail.com
From 89e572824ec7a1d10a6ba417540ac57558aef692 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:25:31 +0800
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-yaml): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 803bb7ea9..ad93722db 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6379,7 +6379,7 @@ configuration.")
(define-public java-fasterxml-jackson-dataformat-yaml
(package
(name "java-fasterxml-jackson-dataformat-yaml")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6387,7 +6387,7 @@ configuration.")
"jackson-dataformats-text-" version ".tar.gz"))
(sha256
(base32
- "1x7c7v201jpb8ynjsmmq7jj7hyqzzp39jvpr053ggdndm022yzc7"))))
+ "1hikl06khaxbg439avf442qifcadap8w0lx13f0nnhp2vh3dkbz7"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-dataformat-yaml.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 13:51
[PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87bmgpncqj.fsf@gmail.com
From acb702101c82cbe71bb57f3407d9c0f1ca8f4323 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:26:02 +0800
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-xml): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index ad93722db..5c505fde1 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6488,7 +6488,7 @@ interface and high-performance Typed Access API.")
(define-public java-fasterxml-jackson-dataformat-xml
(package
(name "java-fasterxml-jackson-dataformat-xml")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6496,7 +6496,7 @@ interface and high-performance Typed Access API.")
"jackson-dataformat-xml-" version ".tar.gz"))
(sha256
(base32
- "1j1qanvcdh6afagr67zqrlypjkf0n6wr1qzpbvkw79lii72j6pbr"))))
+ "111fkkl90w31jbf30kgj82qdcxlw4sxppki7i198liw0ck1jcavq"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-dataformat-xml.jar"
--
2.16.1
L
L
Leo Famulari wrote on 15 Feb 2018 14:20
Re: [bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(name . Alex Vong)(address . alexvong1995@gmail.com)(address . 30472-done@debbugs.gnu.org)
20180215222034.GC15645@jasmine.lan
On Fri, Feb 16, 2018 at 05:34:36AM +0800, Alex Vong wrote:
Toggle quote (7 lines)
> Tags: security
>
> Hello,
>
> The following patch series updates all of the java-fasterxml-* packages
> which include security fixes for java-fasterxml-jackson-databind.

Thank you!

I pushed the series as f3bbe0291b535f21cc0261bd7c5cce4b5594a1f0
-----BEGIN PGP SIGNATURE-----
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=YrvH
-----END PGP SIGNATURE-----


Closed
?
Your comment

This issue is archived.

To comment on this conversation send an email to 30472@patchwise.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 30472
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch