The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xml-commons-apisUpgrade jackson-annotationsUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade xerces-j2Upgrade jackson-coreUpgrade xalan-j2Upgrade javassist-javadocUpgrade slf4jUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade glassfish-jaxb-apiUpgrade xmlstreambufferUpgrade jackson-databindUpgrade apache-commons-langUpgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade javassistUpgrade slf4j-jdk14Upgrade xsomUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-txw2Upgrade stax-exUpgrade python3-nssUpgrade xml-commons-resolverUpgrade velocityUpgrade jackson-jaxrs-providers | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade pki-tools-debuginfoUpgrade jackson-jaxrs-providersUpgrade resteasyUpgrade python3-nssUpgrade ldapjdk-javadocUpgrade velocityUpgrade pki-symkey-debuginfoUpgrade slf4j-jdk14Upgrade tomcatjssUpgrade apache-commons-langUpgrade xerces-j2Upgrade pki-servlet-engineUpgrade pki-kraUpgrade javassistUpgrade jss-javadocUpgrade ldapjdkUpgrade apache-commons-collectionsUpgrade stax-exUpgrade python-nss-docUpgrade glassfish-jaxb-apiUpgrade python3-pkiUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade pki-symkeyUpgrade jackson-jaxrs-json-providerUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-apisUpgrade jackson-databindUpgrade slf4jUpgrade javassist-javadocUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade jackson-coreUpgrade xsomUpgrade jss-debugsourceUpgrade relaxngDatatypeUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade glassfish-fastinfosetUpgrade python-nss-debugsourceUpgrade jss-debuginfoUpgrade pki-core-debugsourceUpgrade pki-baseUpgrade xalan-j2Upgrade jssUpgrade pki-caUpgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade pki-base-javaUpgrade pki-servlet-4.0-apiUpgrade python3-nss-debuginfo | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 31535411 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 31537019 for version 12.2.1.4.0. | Jul 14, 2020 | Mar 2, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade pki-base-javaUpgrade pki-baseUpgrade jakarta-commons-httpclientUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade jackson-jaxrs-json-providerUpgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade velocityUpgrade javassistUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade jackson-module-jaxb-annotationsUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade xalan-j2Upgrade ldapjdkUpgrade xerces-j2Upgrade javassist-javadocUpgrade pki-kraUpgrade pki-servlet-engineUpgrade stax-exUpgrade jss-javadocUpgrade pki-tools-debuginfoUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade apache-commons-langUpgrade python3-pkiUpgrade resteasyUpgrade jackson-annotationsUpgrade pki-serverUpgrade glassfish-fastinfosetUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade pki-toolsUpgrade jss-debuginfoUpgrade slf4j-jdk14Upgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade slf4jUpgrade apache-commons-collectionsUpgrade python-nss-debugsourceUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade glassfish-jaxb-coreUpgrade xsomUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade jssUpgrade pki-symkeyUpgrade pki-core-debuginfo | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfo | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub