Red Hat Security AdvisoryRHSA-2019:2743
rh-maven35-jackson-databind security update
Released 2019-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-maven35-jackson-databind-2.7.6-2.7.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.7.el7
Fixes 1 record
Priority MEDIUM 60
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code ex…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08111 · Published 2019-07-29 · Partial fix · 2.9.9.2, 2.8.11.4 +1 CWE-1321
