Wed, 28 Oct 2026 22:38:18 CST | login

Information for build jackson-databind-2.14.2-5.oc9.4

ID48732
Package Namejackson-databind
Version2.14.2
Release5.oc9.4
Epoch
DraftFalse
Sourcegit+https://gitee.com/src-opencloudos-rpms/jackson-databind.git#ac82c8f91fbf53c5a993bfb4684ab70126e9cd16
SummaryGeneral-purpose data-binding functionality and tree-model for Jackson Data Processor
DescriptionThis project contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on Streaming API (stream parser/generator) package, and uses Jackson Annotations for configuration.
Built byoc-bot
State complete
Volume DEFAULT
StartedWed, 28 Oct 2026 10:19:16 CST
CompletedWed, 28 Oct 2026 10:21:34 CST
Taskbuild (dist-oc9, /src-opencloudos-rpms/jackson-databind.git:ac82c8f91fbf53c5a993bfb4684ab70126e9cd16)
Extra{'source': {'original_url': 'git+https://gitee.com/src-opencloudos-rpms/jackson-databind.git#ac82c8f91fbf53c5a993bfb4684ab70126e9cd16'}}
Tags
dist-oc9
dist-oc9-compose
RPMs
src
jackson-databind-2.14.2-5.oc9.4.src.rpm (info) (download)
noarch
jackson-databind-2.14.2-5.oc9.4.noarch.rpm (info) (download)
Logs
noarch
installed_pkgs.log
hw_info.log
dnf.rpm.log
mock_config.log
dnf.librepo.log
root.log
mock_output.log
state.log
dnf.log
build.log
noarch_rpmdiff.json
Changelog * Mon Oct 26 2026 jeremiah <jeremiazhao@tencent.com> - 2.14.2-5.4 - Fix CVE-2026-110879: incomplete generic-argument and array-element validation allowed PolymorphicTypeValidator bypasses - Fix CVE-2026-91777: quadratic forward-reference completion in identity-enabled collections and maps (CPU denial of service) - Backport upstream databind#6204 fix (key pending references by object id and move each value once while preserving encounter order) * Thu Sep 17 2026 jeremiah <jeremiazhao@tencent.com> - 2.14.2-5.3 - Fix CVE-2026-68497: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization (CPU denial of service) - Backport upstream databind#6127 fix (StreamReadConstraints number-length validation before DatatypeFactory.newDuration/newXMLGregorianCalendar) * Thu Jun 25 2026 jeremiah <jeremiazhao@tencent.com> - 2.14.2-5.2 - Fix CVE-2026-54512: PolymorphicTypeValidator generic type parameter bypass - Backport upstream databind#5988 fix (validate type parameters smuggled into an allow-listed container, e.g. "java.util.ArrayList<EvilGadget>") - Apply patch via `git apply` (%autosetup -S git) to tolerate context format * Mon May 18 2026 TencentOS Team <tencent_os@tencent.com> - 2.14.2-5.1 - Rebuild for jackson-core update * Thu Sep 26 2024 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 2.14.2-5 - Rebuilt for clarifying the packages requirement in BaseOS and AppStream * Fri Aug 16 2024 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 2.14.2-4 - Rebuilt for loongarch release * Fri Sep 08 2023 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 2.14.2-3 - Rebuilt for OpenCloudOS Stream 23.09 * Fri Apr 28 2023 OpenCloudOS Release Engineering <releng@opencloudos.tech> - 2.14.2-2 - Rebuilt for OpenCloudOS Stream 23.05 * Mon Apr 24 2023 Miaojun Dong <zoedong@tencent.com> - 2.14.2-1 - initial build