FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade stax-exUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-providersUpgrade javassistUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade velocityUpgrade jakarta-commons-httpclientUpgrade python-nss-docUpgrade python3-nssUpgrade xsomUpgrade bea-stax-apiUpgrade glassfish-jaxb-txw2Upgrade xmlstreambufferUpgrade javassist-javadocUpgrade relaxngDatatypeUpgrade glassfish-jaxb-apiUpgrade jackson-databindUpgrade jackson-annotationsUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-apisUpgrade xerces-j2Upgrade apache-commons-langUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade jackson-coreUpgrade xalan-j2Upgrade jackson-module-jaxb-annotations | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade slf4jUpgrade jackson-annotationsUpgrade jackson-coreUpgrade pki-base-javaUpgrade xsomUpgrade pki-toolsUpgrade pki-serverUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-coreUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-runtimeUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade jss-debuginfoUpgrade pki-servlet-4.0-apiUpgrade python-nss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jssUpgrade pki-baseUpgrade pki-core-debugsourceUpgrade xalan-j2Upgrade pki-caUpgrade python3-nss-debuginfoUpgrade jackson-databindUpgrade javassist-javadocUpgrade jakarta-commons-httpclientUpgrade xerces-j2Upgrade jackson-jaxrs-providersUpgrade python3-pkiUpgrade pki-tools-debuginfoUpgrade resteasyUpgrade stax-exUpgrade pki-symkeyUpgrade velocityUpgrade slf4j-jdk14Upgrade apache-commons-langUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-apiUpgrade python-nss-docUpgrade pki-servlet-engineUpgrade xmlstreambufferUpgrade bea-stax-apiUpgrade python3-nssUpgrade pki-symkey-debuginfoUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade jss-javadocUpgrade javassistUpgrade pki-kra | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 31537019 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 31535411 for version 12.2.1.3.0. | Jul 14, 2020 | Mar 2, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade pki-toolsUpgrade pki-servlet-4.0-apiUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-coreUpgrade slf4jUpgrade slf4j-jdk14Upgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade xsomUpgrade pki-symkeyUpgrade pki-caUpgrade jackson-coreUpgrade apache-commons-collectionsUpgrade xml-commons-resolverUpgrade jss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade pki-core-debuginfoUpgrade jss-debugsourceUpgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade jssUpgrade xalan-j2Upgrade stax-exUpgrade xml-commons-apisUpgrade ldapjdkUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade pki-base-javaUpgrade jackson-databindUpgrade pki-baseUpgrade resteasyUpgrade jss-javadocUpgrade jackson-module-jaxb-annotationsUpgrade xerces-j2Upgrade jackson-annotationsUpgrade glassfish-fastinfosetUpgrade pki-kraUpgrade pki-serverUpgrade jackson-jaxrs-json-providerUpgrade velocityUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade pki-core-debugsourceUpgrade jakarta-commons-httpclientUpgrade pki-servlet-engineUpgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade pki-symkey-debuginfoUpgrade javassistUpgrade tomcatjssUpgrade javassist-javadocUpgrade ldapjdk-javadocUpgrade pki-tools-debuginfo | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub