jackson-databind - security update

Fixed packages 1

Vulnerabilities 4

• Critical 9.8
  CVE-2019-14540 Public exploit EPSS 11%

  Polymorphic Typing issue in FasterXML jackson-databind

  A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

  com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  Sep 15, 2019
• Critical 9.8
  CVE-2019-16335

  Polymorphic Typing issue in FasterXML jackson-databind

  A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

  com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  Sep 15, 2019
• Critical 9.8
  CVE-2019-16942

  Polymorphic Typing in FasterXML jackson-databind

  A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in…

  jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  Oct 1, 2019
• Critical 9.8
  CVE-2019-16943

  jackson-databind polymorphic typing issue

  A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the …

  com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  Oct 1, 2019