Red Hat Security Advisory

RHSA-2019:4192

rh-maven35-jackson-databind security update

Released 2019-12-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-maven35-jackson-databind-2.7.6-2.8.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.8.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-maven35-jackson-databind-2.7.6-2.8.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.8.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-maven35-jackson-databind-2.7.6-2.8.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.8.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-maven35-jackson-databind-2.7.6-2.8.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.8.el7
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-maven35-jackson-databind-2.7.6-2.8.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.8.el7

TI-2019-13075 CVE-2019-17531 · GHSA-gjmw-vf9h-g25v

MEDIUM 57

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05373 Published 2019-10-12 Partial fix · 2.9.10.1, 2.8.11.5 +1 CWE-502