The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xalan-j2Upgrade jakarta-commons-httpclientUpgrade javassistUpgrade jackson-jaxrs-json-providerUpgrade javassist-javadocUpgrade relaxngDatatypeUpgrade slf4jUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-txw2Upgrade jackson-annotationsUpgrade xml-commons-resolverUpgrade xsomUpgrade glassfish-jaxb-runtimeUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade python-nss-docUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade python3-nssUpgrade velocityUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade jackson-databindUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade jackson-jaxrs-providersUpgrade jackson-coreUpgrade xmlstreambuffer | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade jss-debuginfoUpgrade xalan-j2Upgrade xml-commons-apisUpgrade pki-servlet-4.0-apiUpgrade jakarta-commons-httpclientUpgrade pki-caUpgrade jss-debugsourceUpgrade pki-base-javaUpgrade python-nss-debugsourceUpgrade jssUpgrade pki-kraUpgrade glassfish-fastinfosetUpgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade javassist-javadocUpgrade javassistUpgrade pki-toolsUpgrade jackson-annotationsUpgrade slf4jUpgrade xsomUpgrade apache-commons-langUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade pki-baseUpgrade jss-javadocUpgrade jackson-databindUpgrade pki-core-debugsourceUpgrade ldapjdk-javadocUpgrade python3-nssUpgrade jackson-coreUpgrade pki-symkeyUpgrade stax-exUpgrade apache-commons-collectionsUpgrade xml-commons-resolverUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade pki-tools-debuginfoUpgrade pki-servlet-engineUpgrade pki-core-debuginfoUpgrade velocityUpgrade resteasyUpgrade python3-pkiUpgrade pki-symkey-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade ldapjdkUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade xerces-j2 | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade pki-core-debuginfoUpgrade jss-debugsourceUpgrade jackson-databindUpgrade pki-kraUpgrade pki-servlet-4.0-apiUpgrade pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade python-nss-docUpgrade jackson-jaxrs-json-providerUpgrade python3-nss-debuginfoUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade jssUpgrade pki-baseUpgrade xml-commons-apisUpgrade pki-core-debugsourceUpgrade pki-caUpgrade xerces-j2Upgrade xsomUpgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade python3-nssUpgrade jackson-coreUpgrade jss-debuginfoUpgrade jss-javadocUpgrade relaxngDatatypeUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade jakarta-commons-httpclientUpgrade python-nss-debugsourceUpgrade stax-exUpgrade apache-commons-collectionsUpgrade pki-toolsUpgrade pki-symkey-debuginfoUpgrade pki-base-javaUpgrade xalan-j2Upgrade pki-serverUpgrade pki-symkeyUpgrade javassist-javadocUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade slf4jUpgrade glassfish-fastinfosetUpgrade tomcatjssUpgrade bea-stax-apiUpgrade python3-pkiUpgrade glassfish-jaxb-coreUpgrade velocityUpgrade ldapjdkUpgrade resteasy | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nss | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub