Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-1907

Высокий

ALT-PU-2021-1907: package jackson-databind update to version 2.11.2-alt1_2jpp11

Источник
errata.altlinux.org
Дата публикации
02.06.2021
Дата обновления
04.02.2026
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades jackson-databind to version 2.11.2-alt1_2jpp11.

Устраненные уязвимости2

Ссылки2

ALT-PU-2021-1907https://errata.altlinux.org/ALT-PU-2021-1907

GHSA-288c-cq4h-88gq

https://github.com/advisories/GHSA-288c-cq4h-88gq

Связанные уязвимости

ubuntu логотип

CVE-2020-25649

CVSS3: 7.5
ubuntu
почти 6 лет назад

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

redhat логотип

CVE-2020-25649

CVSS3: 7.5
redhat
почти 7 лет назад

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

nvd логотип

CVE-2020-25649

CVSS3: 7.5
nvd
почти 6 лет назад

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

debian логотип

CVE-2020-25649

CVSS3: 7.5
debian
почти 6 лет назад

A flaw was found in FasterXML Jackson Databind, where it did not have ...

github логотип

GHSA-288c-cq4h-88gq

CVSS3: 7.5
github
больше 5 лет назад

XML External Entity (XXE) Injection in Jackson Databind