gpp_maybe Security update for jackson-databind

SUSE-SLE-Module-Development-Tools-15-SP3-2022-3995

This update for jackson-databind fixes the following issues: Update to version 2.13.4.2: - CVE-2022-42003: Fixed missing check in primitive value deserializers to avoid deep wrapper array nesting wrt 'UNWRAP_SINGLE_VALUE_ARRAYS' (bsc#1204370). - CVE-2022-42004: Fixed missing check in 'BeanDeserializer._deserializeFromArray()' to prevent use of deeply nested arrays (bsc#1204369).

• Release Date
  Nov 15 2022
• References
  Bugzilla: 1204370, 1204369
  CVEs: CVE-2022-42004, CVE-2022-42003
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.3 ppc64le

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.13.4.2-150200.3.12.1 lock rpm lock src

Development Tools Module 15.3 s390x

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.13.4.2-150200.3.12.1 lock rpm lock src

Development Tools Module 15.3 aarch64

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.13.4.2-150200.3.12.1 lock rpm lock src

Development Tools Module 15.3 x86_64

• Packages
  jackson-databind
  General data-binding package for Jackson (2.x)

  2.13.4.2-150200.3.12.1 lock rpm lock src