GNU bug report logs

#30472 [PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.

PackageSource(s)Maintainer(s)
guix-patches PTS Buildd Popcon
Reply or subscribe to this bug. View this bug as an mbox, status mbox, or maintainer mbox

Report forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:36:02 GMT) (full text, mbox, link).

Acknowledgement sent to Alex Vong <alexvong1995@gmail.com>:
New bug report received and forwarded. Copy sent to guix-patches@gnu.org. (Thu, 15 Feb 2018 21:36:02 GMT) (full text, mbox, link).

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: guix-patches@gnu.org
Subject: [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:34:36 +0800
Tags: security

Hello,

The following patch series updates all of the java-fasterxml-* packages
which include security fixes for java-fasterxml-jackson-databind.

Cheers,
Alex

Changed bug title to '[PATCH 0/6] gnu: java-fasterxml-*' from '[PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.' Request was from Alex Vong <alexvong1995@gmail.com> to control@debbugs.gnu.org. (Thu, 15 Feb 2018 21:39:01 GMT) (full text, mbox, link).

Changed bug title to '[PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.' from '[PATCH 0/6] gnu: java-fasterxml-*' Request was from Alex Vong <alexvong1995@gmail.com> to control@debbugs.gnu.org. (Thu, 15 Feb 2018 21:44:01 GMT) (full text, mbox, link).

Added tag(s) patch. Request was from Alex Vong <alexvong1995@gmail.com> to control@debbugs.gnu.org. (Thu, 15 Feb 2018 21:44:01 GMT) (full text, mbox, link).

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:47:02 GMT) (full text, mbox, link).

Message #14 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:46:06 +0800
[0001-gnu-java-fasterxml-jackson-annotations-Update-to-2.9.patch (text/x-diff, inline)]
From 6ebdd4abf565ee2006d81ea90cc0d536e0a911a0 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:18:56 +0800
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-annotations): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e714a031c..e8355e324 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6183,7 +6183,7 @@ the system under test at the same time.")
 (define-public java-fasterxml-jackson-annotations
   (package
     (name "java-fasterxml-jackson-annotations")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6191,7 +6191,7 @@ the system under test at the same time.")
                                   "jackson-annotations-" version ".tar.gz"))
               (sha256
                (base32
-                "0b4wdxjxfbl3gkilylfdbl7fzimfpyih676jiwdf19i4056j8lqw"))))
+                "0mr95xd0da6a4g95zvrl1ryk5n5zv2rc696w3xnsr5hxk2gicfc4"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-annotations.jar"
-- 
2.16.1

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:47:02 GMT) (full text, mbox, link).

Message #17 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:46:31 +0800
[0002-gnu-java-fasterxml-jackson-core-Update-to-2.9.4.patch (text/x-diff, inline)]
From 04a83abedc6b5ea11d115fa29f81ff806d71b289 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:26 +0800
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-core): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e8355e324..8aca53ca3 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6209,7 +6209,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-core
   (package
     (name "java-fasterxml-jackson-core")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6217,7 +6217,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-core-" version ".tar.gz"))
               (sha256
                (base32
-                "0q2d6qnylyxj5jh0sam1b095b5486f7ipzhxgwcgbm254ls7fqc1"))))
+                "159hsnk17jr1gyzkf01cxvsn45srnk37g949r7364qlsr527gjgd"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-core.jar"
-- 
2.16.1

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:50:02 GMT) (full text, mbox, link).

Message #20 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485, 2018-5968}].
Date: Fri, 16 Feb 2018 05:49:06 +0800
[0003-gnu-java-fasterxml-jackson-databind-Update-to-2.9.4-.patch (text/x-diff, inline)]
From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
 [fixes CVE-{2017-17485,2018-5968}].

* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
 (define-public java-fasterxml-jackson-databind
   (package
     (name "java-fasterxml-jackson-databind")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
                                   "jackson-databind-" version ".tar.gz"))
               (sha256
                (base32
-                "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+                "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-databind.jar"
-- 
2.16.1

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:51:02 GMT) (full text, mbox, link).

Message #23 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:49:53 +0800
[0004-gnu-java-fasterxml-jackson-modules-base-jaxb-Update-.patch (text/x-diff, inline)]
From 42c31e0578da43874ffcc44c89ca64a2d416dd6a Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:24:59 +0800
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-modules-base-jaxb): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e38614d9a..803bb7ea9 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6309,7 +6309,7 @@ configuration.")
 (define-public java-fasterxml-jackson-modules-base-jaxb
   (package
     (name "java-fasterxml-jackson-modules-base-jaxb")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6317,7 +6317,7 @@ configuration.")
                                   "jackson-modules-base-" version ".tar.gz"))
               (sha256
                (base32
-                "0kc19n5a188g4vpyay44xfb7qcabcbfnwzhx1g84lg0sac8lf0ng"))))
+                "1wws95xi8sppp6b0k2vvjdjyynl20r1a4dwrhai08lzlria6blp5"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-modules-base-jaxb.jar"
-- 
2.16.1

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:51:02 GMT) (full text, mbox, link).

Message #26 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:50:15 +0800
[0005-gnu-java-fasterxml-jackson-dataformat-yaml-Update-to.patch (text/x-diff, inline)]
From 89e572824ec7a1d10a6ba417540ac57558aef692 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:25:31 +0800
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-yaml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 803bb7ea9..ad93722db 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6379,7 +6379,7 @@ configuration.")
 (define-public java-fasterxml-jackson-dataformat-yaml
   (package
     (name "java-fasterxml-jackson-dataformat-yaml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6387,7 +6387,7 @@ configuration.")
                                   "jackson-dataformats-text-" version ".tar.gz"))
               (sha256
                (base32
-                "1x7c7v201jpb8ynjsmmq7jj7hyqzzp39jvpr053ggdndm022yzc7"))))
+                "1hikl06khaxbg439avf442qifcadap8w0lx13f0nnhp2vh3dkbz7"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-yaml.jar"
-- 
2.16.1

Information forwarded to guix-patches@gnu.org:
bug#30472; Package guix-patches. (Thu, 15 Feb 2018 21:52:02 GMT) (full text, mbox, link).

Message #29 received at 30472@debbugs.gnu.org (full text, mbox, reply):

From: Alex Vong <alexvong1995@gmail.com>
To: 30472@debbugs.gnu.org
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to 2.9.4.
Date: Fri, 16 Feb 2018 05:51:00 +0800
[0006-gnu-java-fasterxml-jackson-dataformat-xml-Update-to-.patch (text/x-diff, inline)]
From acb702101c82cbe71bb57f3407d9c0f1ca8f4323 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:26:02 +0800
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-xml): Update to
2.9.4.
---
 gnu/packages/java.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index ad93722db..5c505fde1 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6488,7 +6488,7 @@ interface and high-performance Typed Access API.")
 (define-public java-fasterxml-jackson-dataformat-xml
   (package
     (name "java-fasterxml-jackson-dataformat-xml")
-    (version "2.9.2")
+    (version "2.9.4")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://github.com/FasterXML/"
@@ -6496,7 +6496,7 @@ interface and high-performance Typed Access API.")
                                   "jackson-dataformat-xml-" version ".tar.gz"))
               (sha256
                (base32
-                "1j1qanvcdh6afagr67zqrlypjkf0n6wr1qzpbvkw79lii72j6pbr"))))
+                "111fkkl90w31jbf30kgj82qdcxlw4sxppki7i198liw0ck1jcavq"))))
     (build-system ant-build-system)
     (arguments
      `(#:jar-name "jackson-dataformat-xml.jar"
-- 
2.16.1

Reply sent to Leo Famulari <leo@famulari.name>:
You have taken responsibility. (Thu, 15 Feb 2018 22:21:02 GMT) (full text, mbox, link).

Notification sent to Alex Vong <alexvong1995@gmail.com>:
bug acknowledged by developer. (Thu, 15 Feb 2018 22:21:02 GMT) (full text, mbox, link).

Message #34 received at 30472-done@debbugs.gnu.org (full text, mbox, reply):

From: Leo Famulari <leo@famulari.name>
To: Alex Vong <alexvong1995@gmail.com>
Cc: 30472-done@debbugs.gnu.org
Subject: Re: [bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
Date: Thu, 15 Feb 2018 17:20:34 -0500
[Message part 1 (text/plain, inline)]
On Fri, Feb 16, 2018 at 05:34:36AM +0800, Alex Vong wrote:
> Tags: security
> 
> Hello,
> 
> The following patch series updates all of the java-fasterxml-* packages
> which include security fixes for java-fasterxml-jackson-databind.

Thank you!

I pushed the series as f3bbe0291b535f21cc0261bd7c5cce4b5594a1f0

[signature.asc (application/pgp-signature, inline)]

bug archived. Request was from Debbugs Internal Request <help-debbugs@gnu.org> to internal_control@debbugs.gnu.org. (Fri, 16 Mar 2018 11:24:07 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sat Dec 21 13:15:41 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.