Описание
Security update for jettison
This update for jettison fixes the following issues:
Upgrade to version 1.5.4:
- CVE-2023-1436: Fixed infinite recursion triggered when constructing a JSONArray from a Collection (bsc#1209605).
Список пакетов
openSUSE Leap 15.4
jettison-1.5.4-150200.3.7.1
jettison-javadoc-1.5.4-150200.3.7.1
Ссылки
- Link for SUSE-SU-2023:1948-1
- E-Mail link for SUSE-SU-2023:1948-1
- SUSE Security Ratings
- SUSE Bug 1209605
- SUSE CVE CVE-2023-1436 page
Описание
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
Затронутые продукты
openSUSE Leap 15.4:jettison-1.5.4-150200.3.7.1
openSUSE Leap 15.4:jettison-javadoc-1.5.4-150200.3.7.1
Ссылки
- CVE-2023-1436
- SUSE Bug 1209605