[PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.

  • Done
  • quality assurance status badge
Details
2 participants
  • Alex Vong
  • Leo Famulari
Owner
unassigned
Submitted by
Alex Vong
Severity
normal
A
A
Alex Vong wrote on 15 Feb 2018 22:34
[PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(address . guix-patches@gnu.org)
87d116ndhv.fsf@gmail.com
Tags: security

Hello,

The following patch series updates all of the java-fasterxml-* packages
which include security fixes for java-fasterxml-jackson-databind.

Cheers,
Alex
A
A
Alex Vong wrote on 15 Feb 2018 22:38
Fix title
(address . control@debbugs.gnu.org)
878tbundax.fsf@gmail.com
package guix-patches
retitle 30472 [PATCH 0/6] gnu: java-fasterxml-*
thanks
A
A
Alex Vong wrote on 15 Feb 2018 22:43
(name . GNU bug tracker automated control server)(address . control@debbugs.gnu.org)
871shmnd37.fsf@gmail.com
package guix-patches
retitle 30472 [PATCH 0/6] gnu: java-fasterxml-*: Update to 2.9.4.
tags 30472 patch
thanks
A
A
Alex Vong wrote on 15 Feb 2018 22:46
[PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87wozelye9.fsf@gmail.com
From 6ebdd4abf565ee2006d81ea90cc0d536e0a911a0 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:18:56 +0800
Subject: [PATCH 1/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-annotations): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e714a031c..e8355e324 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6183,7 +6183,7 @@ the system under test at the same time.")
(define-public java-fasterxml-jackson-annotations
(package
(name "java-fasterxml-jackson-annotations")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6191,7 +6191,7 @@ the system under test at the same time.")
"jackson-annotations-" version ".tar.gz"))
(sha256
(base32
- "0b4wdxjxfbl3gkilylfdbl7fzimfpyih676jiwdf19i4056j8lqw"))))
+ "0mr95xd0da6a4g95zvrl1ryk5n5zv2rc696w3xnsr5hxk2gicfc4"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-annotations.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 22:46
[PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87sha2lydk.fsf@gmail.com
From 04a83abedc6b5ea11d115fa29f81ff806d71b289 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:26 +0800
Subject: [PATCH 2/6] gnu: java-fasterxml-jackson-core: Update to 2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-core): Update to 2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e8355e324..8aca53ca3 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6209,7 +6209,7 @@ not included are ones that require dependency to the Databind package.")
(define-public java-fasterxml-jackson-core
(package
(name "java-fasterxml-jackson-core")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6217,7 +6217,7 @@ not included are ones that require dependency to the Databind package.")
"jackson-core-" version ".tar.gz"))
(sha256
(base32
- "0q2d6qnylyxj5jh0sam1b095b5486f7ipzhxgwcgbm254ls7fqc1"))))
+ "159hsnk17jr1gyzkf01cxvsn45srnk37g949r7364qlsr527gjgd"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-core.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 22:49
[PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4 [fixes CVE-{2017-17485, 2018-5968}].
(address . 30472@debbugs.gnu.org)
87o9kpnctp.fsf@gmail.com
From 3dfe7719323a429a36ff88399978ae9515209ca5 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:19:57 +0800
Subject: [PATCH 3/6] gnu: java-fasterxml-jackson-databind: Update to 2.9.4
[fixes CVE-{2017-17485,2018-5968}].

* gnu/packages/java.scm (java-fasterxml-jackson-databind): Update to 2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 8aca53ca3..e38614d9a 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6266,7 +6266,7 @@ not included are ones that require dependency to the Databind package.")
(define-public java-fasterxml-jackson-databind
(package
(name "java-fasterxml-jackson-databind")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6274,7 +6274,7 @@ not included are ones that require dependency to the Databind package.")
"jackson-databind-" version ".tar.gz"))
(sha256
(base32
- "1d5ns8ypqhdy8d94i8q560ip9kka6q8lhnk6q7nfh2g9mr22cc4w"))))
+ "1zd2cw4z6kdkbx8za96xh9pyicv2a2l7y0rkcx2fqd8hv6d47s08"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-databind.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 22:49
[PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87k1vdncse.fsf@gmail.com
From 42c31e0578da43874ffcc44c89ca64a2d416dd6a Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:24:59 +0800
Subject: [PATCH 4/6] gnu: java-fasterxml-jackson-modules-base-jaxb: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-modules-base-jaxb): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index e38614d9a..803bb7ea9 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6309,7 +6309,7 @@ configuration.")
(define-public java-fasterxml-jackson-modules-base-jaxb
(package
(name "java-fasterxml-jackson-modules-base-jaxb")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6317,7 +6317,7 @@ configuration.")
"jackson-modules-base-" version ".tar.gz"))
(sha256
(base32
- "0kc19n5a188g4vpyay44xfb7qcabcbfnwzhx1g84lg0sac8lf0ng"))))
+ "1wws95xi8sppp6b0k2vvjdjyynl20r1a4dwrhai08lzlria6blp5"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-modules-base-jaxb.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 22:50
[PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87fu61ncrs.fsf@gmail.com
From 89e572824ec7a1d10a6ba417540ac57558aef692 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:25:31 +0800
Subject: [PATCH 5/6] gnu: java-fasterxml-jackson-dataformat-yaml: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-yaml): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index 803bb7ea9..ad93722db 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6379,7 +6379,7 @@ configuration.")
(define-public java-fasterxml-jackson-dataformat-yaml
(package
(name "java-fasterxml-jackson-dataformat-yaml")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6387,7 +6387,7 @@ configuration.")
"jackson-dataformats-text-" version ".tar.gz"))
(sha256
(base32
- "1x7c7v201jpb8ynjsmmq7jj7hyqzzp39jvpr053ggdndm022yzc7"))))
+ "1hikl06khaxbg439avf442qifcadap8w0lx13f0nnhp2vh3dkbz7"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-dataformat-yaml.jar"
--
2.16.1
A
A
Alex Vong wrote on 15 Feb 2018 22:51
[PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to 2.9.4.
(address . 30472@debbugs.gnu.org)
87bmgpncqj.fsf@gmail.com
From acb702101c82cbe71bb57f3407d9c0f1ca8f4323 Mon Sep 17 00:00:00 2001
From: Alex Vong <alexvong1995@gmail.com>
Date: Fri, 16 Feb 2018 05:26:02 +0800
Subject: [PATCH 6/6] gnu: java-fasterxml-jackson-dataformat-xml: Update to
2.9.4.

* gnu/packages/java.scm (java-fasterxml-jackson-dataformat-xml): Update to
2.9.4.
---
gnu/packages/java.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm
index ad93722db..5c505fde1 100644
--- a/gnu/packages/java.scm
+++ b/gnu/packages/java.scm
@@ -6488,7 +6488,7 @@ interface and high-performance Typed Access API.")
(define-public java-fasterxml-jackson-dataformat-xml
(package
(name "java-fasterxml-jackson-dataformat-xml")
- (version "2.9.2")
+ (version "2.9.4")
(source (origin
(method url-fetch)
(uri (string-append "https://github.com/FasterXML/"
@@ -6496,7 +6496,7 @@ interface and high-performance Typed Access API.")
"jackson-dataformat-xml-" version ".tar.gz"))
(sha256
(base32
- "1j1qanvcdh6afagr67zqrlypjkf0n6wr1qzpbvkw79lii72j6pbr"))))
+ "111fkkl90w31jbf30kgj82qdcxlw4sxppki7i198liw0ck1jcavq"))))
(build-system ant-build-system)
(arguments
`(#:jar-name "jackson-dataformat-xml.jar"
--
2.16.1
L
L
Leo Famulari wrote on 15 Feb 2018 23:20
Re: [bug#30472] [PATCH 0/6] gnu: java-fasterxml-jackson-annotations: Update to 2.9.4.
(name . Alex Vong)(address . alexvong1995@gmail.com)(address . 30472-done@debbugs.gnu.org)
20180215222034.GC15645@jasmine.lan
On Fri, Feb 16, 2018 at 05:34:36AM +0800, Alex Vong wrote:
Toggle quote (7 lines)
> Tags: security
>
> Hello,
>
> The following patch series updates all of the java-fasterxml-* packages
> which include security fixes for java-fasterxml-jackson-databind.

Thank you!

I pushed the series as f3bbe0291b535f21cc0261bd7c5cce4b5594a1f0
-----BEGIN PGP SIGNATURE-----
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=YrvH
-----END PGP SIGNATURE-----


Closed
?