shield Security update for jackson-databind

SUSE-SLE-Module-Development-Tools-15-SP2-2021-243

This update for jackson-databind fixes the following issues: jackson-databind was updated to 2.10.5.1: * #2589: `DOMDeserializer`: setExpandEntityReferences(false) may not prevent external entity expansion in all cases (CVE-2020-25649, bsc#1177616) * #2787 (partial fix): NPE after add mixin for enum * #2679: 'ObjectMapper.readValue("123", Void.TYPE)' throws "should never occur"

• Release Date
  Jan 29 2021
• References
  Bugzilla: 1181118, 1180391, 1177616
  CVEs: CVE-2021-20190, CVE-2020-35728, CVE-2020-25649
• Type
  security
• Severity
  moderate

cloud_download Downloads

Development Tools Module 15.2 ppc64le

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.10.5.1-3.3.2 lock rpm lock src

Development Tools Module 15.2 aarch64

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.10.5.1-3.3.2 lock rpm lock src

Development Tools Module 15.2 s390x

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.10.5.1-3.3.2 lock rpm lock src

Development Tools Module 15.2 x86_64

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.10.5.1-3.3.2 lock rpm lock src