The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jackson-databindUpgrade slf4jUpgrade javassist-javadocUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade xmlstreambufferUpgrade apache-commons-langUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-runtimeUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade jackson-coreUpgrade apache-commons-collectionsUpgrade xsomUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade python3-nssUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade bea-stax-apiUpgrade xml-commons-resolverUpgrade stax-exUpgrade velocityUpgrade jackson-jaxrs-providers | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade jackson-databindUpgrade pki-serverUpgrade slf4jUpgrade pki-core-debuginfoUpgrade python3-nss-debuginfoUpgrade jssUpgrade pki-caUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade xml-commons-apisUpgrade xalan-j2Upgrade pki-baseUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade xsomUpgrade glassfish-jaxb-coreUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade pki-core-debugsourceUpgrade glassfish-jaxb-txw2Upgrade jackson-jaxrs-json-providerUpgrade jss-debuginfoUpgrade javassist-javadocUpgrade jackson-coreUpgrade xml-commons-resolverUpgrade python-nss-debugsourceUpgrade glassfish-fastinfosetUpgrade pki-toolsUpgrade pki-servlet-engineUpgrade stax-exUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade ldapjdk-javadocUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade tomcatjssUpgrade python3-nssUpgrade pki-symkey-debuginfoUpgrade python-nss-docUpgrade jakarta-commons-httpclientUpgrade resteasyUpgrade xerces-j2Upgrade velocityUpgrade apache-commons-langUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade javassistUpgrade pki-kraUpgrade pki-symkeyUpgrade glassfish-jaxb-apiUpgrade pki-tools-debuginfoUpgrade python3-pki | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 31537019 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 31535411 for version 12.2.1.3.0. | Jul 14, 2020 | Mar 2, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade pki-base-javaUpgrade apache-commons-langUpgrade pki-baseUpgrade glassfish-jaxb-apiUpgrade tomcatjssUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade jackson-databindUpgrade javassistUpgrade relaxngDatatypeUpgrade javassist-javadocUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade pki-core-debugsourceUpgrade bea-stax-apiUpgrade python3-pkiUpgrade velocityUpgrade resteasyUpgrade stax-exUpgrade xml-commons-apisUpgrade pki-kraUpgrade jackson-annotationsUpgrade xalan-j2Upgrade jss-javadocUpgrade pki-symkey-debuginfoUpgrade glassfish-fastinfosetUpgrade ldapjdkUpgrade xerces-j2Upgrade pki-servlet-engineUpgrade pki-tools-debuginfoUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade pki-caUpgrade glassfish-jaxb-txw2Upgrade jackson-coreUpgrade pki-toolsUpgrade apache-commons-collectionsUpgrade python-nss-debugsourceUpgrade jssUpgrade pki-core-debuginfoUpgrade jackson-jaxrs-providersUpgrade pki-symkeyUpgrade xml-commons-resolverUpgrade xsomUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade jss-debuginfoUpgrade slf4j-jdk14Upgrade python-nss-docUpgrade glassfish-jaxb-coreUpgrade slf4jUpgrade python3-nssUpgrade jss-debugsourceUpgrade pki-servlet-4.0-api | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub