< back to search

shield Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base
SUSE-SLE-Module-Basesystem-15-SP7-2026-3273

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions (bsc#1268902). - CVE-2026-59889: missing view guard when deserializing @JsonUnwrapped properties could allow unauthorized writes to @JsonView restricted fields (bsc#1271440). - CVE-2026-59888: mismatch between property renaming and ignore-filtering on Java Records could allow a bypass of @JsonIgnore restrictions (bsc#1271442). Changes for jackson-annotations: - Update to 2.18.9. Changes for jackson-bom: - Update to 2.18.9. Changes for jackson-core: - Update to 2.18.9. Changes for jackson-databind: - Update to 2.18.9: * honor @JsonView for external-type-id (EXTERNAL_PROPERTY) properties (GHSA-mhm7-754m-9p8w). Changes for jackson-dataformats-binary: - Update to 2.18.9. Changes for jackson-modules-base: - Update to 2.18.9.

cloud_download Downloads

Basesystem Module 15.7 s390x
  • Packages
    jackson-annotations
    Core annotations for Jackson data processor
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-core
    Core part of Jackson
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-databind
    General data-binding package for Jackson (2.x)
    2.18.9-150200.3.33.1 lock rpm lock src
Basesystem Module 15.7 ppc64le
  • Packages
    jackson-annotations
    Core annotations for Jackson data processor
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-core
    Core part of Jackson
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-databind
    General data-binding package for Jackson (2.x)
    2.18.9-150200.3.33.1 lock rpm lock src
Basesystem Module 15.7 aarch64
  • Packages
    jackson-annotations
    Core annotations for Jackson data processor
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-core
    Core part of Jackson
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-databind
    General data-binding package for Jackson (2.x)
    2.18.9-150200.3.33.1 lock rpm lock src
Basesystem Module 15.7 x86_64
  • Packages
    jackson-annotations
    Core annotations for Jackson data processor
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-core
    Core part of Jackson
    2.18.9-150200.3.25.1 lock rpm lock src
    jackson-databind
    General data-binding package for Jackson (2.x)
    2.18.9-150200.3.33.1 lock rpm lock src