Summary
jackson-annotations
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
jackson-core
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
jackson-databind
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
jackson-jaxrs-providers
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
jackson-modules-base
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pki-jackson-annotations | 0:2.14.1-1.el9 |
| Oracle Linux · 9 | pki-jackson-core | 0:2.14.1-2.el9 |
| Oracle Linux · 9 | pki-jackson-databind | 0:2.14.1-2.el9 |
| Oracle Linux · 9 | pki-jackson-jaxrs-json-provider | 0:2.14.1-2.el9 |
| Oracle Linux · 9 | pki-jackson-jaxrs-providers | 0:2.14.1-2.el9 |
| Oracle Linux · 9 | pki-jackson-module-jaxb-annotations | 0:2.14.1-2.el9 |
Vulnerabilities 1
-
High 7.5CVE-2020-36518 Public exploit
Deeply nested json in jackson-databind
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.