ALT-PU-2019-2262: package jackson-databind update to version 2.9.8-alt1_1jpp8
Описание
This update upgrades jackson-databind to version 2.9.8-alt1_1jpp8.
Устраненные уязвимости23
Ссылки12
GHSA-4gq5-ch57-c2mg
https://github.com/advisories/GHSA-4gq5-ch57-c2mgGHSA-645p-88qh-w398
https://github.com/advisories/GHSA-645p-88qh-w398GHSA-6wqp-v4v6-c87c
https://github.com/advisories/GHSA-6wqp-v4v6-c87cGHSA-9mxf-g3x6-wv74
https://github.com/advisories/GHSA-9mxf-g3x6-wv74GHSA-c8hm-7hpq-7jhg
https://github.com/advisories/GHSA-c8hm-7hpq-7jhgGHSA-cggj-fvv3-cqwv
https://github.com/advisories/GHSA-cggj-fvv3-cqwvGHSA-cjjf-94ff-43w7
https://github.com/advisories/GHSA-cjjf-94ff-43w7GHSA-f9hv-mg5h-xcw9
https://github.com/advisories/GHSA-f9hv-mg5h-xcw9GHSA-mx9v-gmh4-mgqw
https://github.com/advisories/GHSA-mx9v-gmh4-mgqwGHSA-qr7j-h6gg-jmgc
https://github.com/advisories/GHSA-qr7j-h6gg-jmgcGHSA-x2w5-5m2g-7h5m
https://github.com/advisories/GHSA-x2w5-5m2g-7h5mСвязанные уязвимости
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2. ...
Deserialization of Untrusted Data in jackson-databind