Bug#891614: jackson-databind: CVE-2018-7489: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

Source: jackson-databind Version: 2.9.4-1 Severity: grave Tags: patch security upstream Justification: user security hole Forwarded: https://github.com/FasterXML/jackson-databind/issues/1931 Hi, the following vulnerability was published for jackson-databind. CVE-2018-7489[0]: | FasterXML

Bug#891310: marked as done (Updating the robert-hooke Uploaders list)

Your message dated Tue, 27 Feb 2018 04:34:39 + with message-id and subject line Bug#891310: fixed in robert-hooke 1.3.0-4 has caused the Debian Bug report #891310, regarding Updating the robert-hooke Uploaders list to be marked as done. This means that

Accepted libclasslojure-clojure 0.7.1-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2018 22:14:30 -0500 Source: libclasslojure-clojure Binary: libclasslojure-clojure Architecture: source Version: 0.7.1-4 Distribution: unstable Urgency: medium Maintainer: Debian Clojure Maintainers

libnb-platform18-java 8.1+dfsg1-7 MIGRATED to testing

FYI: The status of the libnb-platform18-java source package in Debian's testing distribution has changed. Previous version: 8.1+dfsg1-6 Current version: 8.1+dfsg1-7 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times

Bug#863772: marked as done (Updating the robert-hooke Uploaders list)

Your message dated Tue, 27 Feb 2018 04:34:39 + with message-id and subject line Bug#863772: fixed in robert-hooke 1.3.0-4 has caused the Debian Bug report #863772, regarding Updating the robert-hooke Uploaders list to be marked as done. This means that

eclipse 3.8.1-11 MIGRATED to testing

FYI: The status of the eclipse source package in Debian's testing distribution has changed. Previous version: 3.8.1-10 Current version: 3.8.1-11 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

libequinox-osgi-java 3.9.1-1 MIGRATED to testing

FYI: The status of the libequinox-osgi-java source package in Debian's testing distribution has changed. Previous version: (not in testing) Current version: 3.9.1-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times

clojure1.8 1.8.0-4 MIGRATED to testing

FYI: The status of the clojure1.8 source package in Debian's testing distribution has changed. Previous version: (not in testing) Current version: 1.8.0-4 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you

Accepted robert-hooke 1.3.0-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2018 21:35:43 -0500 Source: robert-hooke Binary: librobert-hooke-clojure Architecture: source Version: 1.3.0-4 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers

robert-hooke_1.3.0-4_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2018 21:35:43 -0500 Source: robert-hooke Binary: librobert-hooke-clojure Architecture: source Version: 1.3.0-4 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers

Processing of robert-hooke_1.3.0-4_source.changes

robert-hooke_1.3.0-4_source.changes uploaded successfully to localhost along with the files: robert-hooke_1.3.0-4.dsc robert-hooke_1.3.0-4.debian.tar.xz robert-hooke_1.3.0-4_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) __ This is the

[clojure] 02/02: Update upstream source from tag 'upstream/1.9.0'

This is an automated email from the git hooks/post-receive script. ehashman-guest pushed a commit to branch master in repository clojure. commit 6a3775d688f0157e079658bcd0969e9620b7f04b Merge: f15ad16 ebb91bc Author: Elana Hashman Date: Mon Feb 26 22:29:15 2018 -0500

[clojure] 01/01: pristine-tar data for clojure_1.9.0.orig.tar.xz

This is an automated email from the git hooks/post-receive script. ehashman-guest pushed a commit to branch pristine-tar in repository clojure. commit 88ac3816996ae55c822fa8a88bf3be69f0e112be Author: Elana Hashman Date: Mon Feb 26 22:32:18 2018 -0500 pristine-tar

[clojure] 01/02: Update watch file to no longer include alpha versions

This is an automated email from the git hooks/post-receive script. ehashman-guest pushed a commit to branch master in repository clojure. commit f15ad16a23c5153c76ba070f0b0e6f8928dadc1e Author: Elana Hashman Date: Mon Feb 26 22:28:54 2018 -0500 Update watch file to

[clojure] branch pristine-tar updated (1534861 -> 88ac381)

This is an automated email from the git hooks/post-receive script. ehashman-guest pushed a change to branch pristine-tar in repository clojure. from 1534861 pristine-tar data for clojure_1.9.0~alpha15.orig.tar.xz new 88ac381 pristine-tar data for clojure_1.9.0.orig.tar.xz The

[clojure] branch master updated (0d46ba1 -> 6a3775d)

This is an automated email from the git hooks/post-receive script. ehashman-guest pushed a change to branch master in repository clojure. from 0d46ba1 Release version 1.9.0~alpha15-2 new f15ad16 Update watch file to no longer include alpha versions adds ebb91bc New

robert-hooke_1.3.0-4_source.changes REJECTED

robert-hooke_1.3.0-4.dsc: Invalid size hash for robert-hooke_1.3.0.orig.tar.gz: According to the control file the size hash should be 14715, but robert-hooke_1.3.0.orig.tar.gz has 14710. If you did not include robert-hooke_1.3.0.orig.tar.gz in your upload, a different version might already be

Processing of robert-hooke_1.3.0-4_source.changes

robert-hooke_1.3.0-4_source.changes uploaded successfully to localhost along with the files: robert-hooke_1.3.0-4.dsc robert-hooke_1.3.0-4.debian.tar.xz robert-hooke_1.3.0-4_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) __ This is the

[jcommander] annotated tag debian/1.71-1 created (now 1692372)

This is an automated email from the git hooks/post-receive script. seamlik-guest pushed a change to annotated tag debian/1.71-1 in repository jcommander. at 1692372 (tag) tagging da6c257cad7b990d798cf8938e5e4f6917102622 (commit) replaces debian/1.48-1 tagged by 殷啟聰 |

[tools-nrepl-clojure] branch master updated (d1f3103 -> 98e2b27)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository tools-nrepl-clojure. from d1f3103 Initial Debian packaging new 98e2b27 Change libclojure from Build-Dep to Dep The 1 revisions listed above as "new"

[libtools-macro-clojure] branch master updated (5318ed9 -> 329f566)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository libtools-macro-clojure. from 5318ed9 New upstream release (0.1.5) new 329f566 Change libclojure from Build-Dep to Dep The 1 revisions listed above

[libtools-macro-clojure] 01/01: Change libclojure from Build-Dep to Dep

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository libtools-macro-clojure. commit 329f566da35c93d5a98bed3e369f643e2ef50554 Author: Tom Marble Date: Mon Feb 26 17:08:57 2018 -0600 Change

[procyon] annotated tag debian/0.5.32-2 created (now 3435dc7)

This is an automated email from the git hooks/post-receive script. ebourg-guest pushed a change to annotated tag debian/0.5.32-2 in repository procyon. at 3435dc7 (tag) tagging 54971334e7f91652b449b122ed96b4c0c9eeb43b (commit) replaces debian/0.5.32-1 tagged by Emmanuel Bourg

Accepted procyon 0.5.32-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2018 23:34:29 +0100 Source: procyon Binary: libprocyon-java procyon-decompiler Architecture: source Version: 0.5.32-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers

procyon_0.5.32-2_source.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 26 Feb 2018 23:34:29 +0100 Source: procyon Binary: libprocyon-java procyon-decompiler Architecture: source Version: 0.5.32-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers

Processing of procyon_0.5.32-2_source.changes

procyon_0.5.32-2_source.changes uploaded successfully to localhost along with the files: procyon_0.5.32-2.dsc procyon_0.5.32-2.debian.tar.xz procyon_0.5.32-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) __ This is the maintainer address

[procyon] 02/03: Switch to debhelper level 11

This is an automated email from the git hooks/post-receive script. ebourg-guest pushed a commit to branch master in repository procyon. commit 291ccd5ea2701653a8383939127f00d6ed32c4fb Author: Emmanuel Bourg Date: Fri Feb 16 14:54:27 2018 +0100 Switch to debhelper level

[procyon] 03/03: Upload to unstable

This is an automated email from the git hooks/post-receive script. ebourg-guest pushed a commit to branch master in repository procyon. commit 54971334e7f91652b449b122ed96b4c0c9eeb43b Author: Emmanuel Bourg Date: Mon Feb 26 23:34:40 2018 +0100 Upload to unstable ---

[procyon] branch master updated (f0a2a27 -> 5497133)

This is an automated email from the git hooks/post-receive script. ebourg-guest pushed a change to branch master in repository procyon. from f0a2a27 d/control: Build-Depends on default-jre => default-hre-headless new 2f30995 Standards-Version updated to 4.1.3 new

[procyon] 01/03: Standards-Version updated to 4.1.3

This is an automated email from the git hooks/post-receive script. ebourg-guest pushed a commit to branch master in repository procyon. commit 2f30995ef2e560c4835da75179904949ba8936c3 Author: Emmanuel Bourg Date: Fri Feb 16 14:54:21 2018 +0100 Standards-Version updated

jcommander_1.71-1_source.changes REJECTED

Version check failed: Your upload included the source package jcommander, version 1.71-1, however testing already has version 1.71-1. Uploads to unstable must have a higher version than present in testing. === Please feel free to respond to this email if you don't understand why your files

[librobert-hooke-clojure] branch master updated (9d37c3f -> 4cf7bbd)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository librobert-hooke-clojure. from 9d37c3f Upload to unstable new 4cf7bbd Change libclojure from Build-Dep to Dep The 1 revisions listed above as "new"

[librobert-hooke-clojure] 01/01: Change libclojure from Build-Dep to Dep

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository librobert-hooke-clojure. commit 4cf7bbdf80c5789359ba88a1a934b1fce4d323fe Author: Tom Marble Date: Mon Feb 26 15:29:51 2018 -0600 Change

Processing of jcommander_1.71-1_source.changes

jcommander_1.71-1_source.changes uploaded successfully to localhost along with the files: jcommander_1.71-1.dsc jcommander_1.71.orig.tar.xz jcommander_1.71-1.debian.tar.xz jcommander_1.71-1_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

[libclasslojure-clojure] 01/01: Change libclojure from Build-Dep to Dep

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository libclasslojure-clojure. commit f343e5c714a4625722752a516bbce83f1b390cd8 Author: Tom Marble Date: Mon Feb 26 15:22:35 2018 -0600 Change

[libclasslojure-clojure] branch master updated (3fc5d3e -> f343e5c)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository libclasslojure-clojure. from 3fc5d3e Improve/fix packaging new f343e5c Change libclojure from Build-Dep to Dep The 1 revisions listed above as "new"

[libbultitude-clojure] branch master updated (5e791f6 -> 9255410)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository libbultitude-clojure. from 5e791f6 Update libclojure dependency new 9c07f0a Move libclojure from Build-Dep to Dep new 9255410 Set Team

[libbultitude-clojure] 02/02: Set Team Upload

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository libbultitude-clojure. commit 9255410db0cc080e60e37a9155420b7bb9f64ff8 Author: Tom Marble Date: Mon Feb 26 15:14:38 2018 -0600 Set Team Upload

[libbultitude-clojure] 01/02: Move libclojure from Build-Dep to Dep

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository libbultitude-clojure. commit 9c07f0aae5da151a7d49f939586a96a50ec48d9d Author: Tom Marble Date: Mon Feb 26 15:13:02 2018 -0600 Move libclojure

[libbultitude-clojure] branch master updated (27e13ae -> 5e791f6)

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a change to branch master in repository libbultitude-clojure. from 27e13ae Declare compliance with Debian Policy 4.0.0. new 5e791f6 Update libclojure dependency The 1 revisions listed

[libbultitude-clojure] 01/01: Update libclojure dependency

This is an automated email from the git hooks/post-receive script. tmarble-guest pushed a commit to branch master in repository libbultitude-clojure. commit 5e791f682156d747650c54d05a130d1794809b1e Author: Tom Marble Date: Mon Feb 26 14:29:53 2018 -0600 Update

Processed: Move to the package where the bug was

Processing commands for cont...@bugs.debian.org: > reassign 891217 libmaven3-core-java 3.5.2-1 Bug #891217 {Done: Mattias Ellert } [src:voms-api-java] voms-api-java FTBFS: java.lang.NoClassDefFoundError Bug reassigned from package 'src:voms-api-java' to