SUSE-SU-2021:0243-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2021:0243-1

Upstream

CVE (3)

Related

CVE (3)

Published

2021-01-29T08:37:34Z

Modified

2026-02-04T02:17:31Z

Summary

Security update for jackson-databind

Details

This update for jackson-databind fixes the following issues:

jackson-databind was updated to 2.10.5.1:

#2589: DOMDeserializer: setExpandEntityReferences(false) may not prevent external entity expansion in all cases (CVE-2020-25649, bsc#1177616)
#2787 (partial fix): NPE after add mixin for enum
#2679: 'ObjectMapper.readValue('123', Void.TYPE)' throws 'should never occur'

References

Affected packages

Name: jackson-databind
Purl: pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.10.5.1-3.3.2

{
    "binaries":  [
        {
            "jackson-databind":  "2.10.5.1-3.3.2"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:0243-1.json"