CLSA-2026-1793274003: TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.9.1-tuxcare.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/com.fasterxml.jackson.core:jackson-databindto a version that resolves this vulnerability.Fixed in 2.9.9.1-tuxcare.2 - Upgrade
Upgrade
com.fasterxml.jackson.core:jackson-databindto a version that resolves this vulnerability.Fixed in 2.9.9.1-tuxcare.2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which version includes the fixes?
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind with fixes for seven CVEs in version 2.9.9.1-tuxcare.2.
How can I determine whether this update is relevant to my environment?
Check whether your environment uses the TuxCare build of com.fasterxml.jackson.core:jackson-databind. The supplied information does not identify the individual CVEs, affected prior versions, exploit conditions, or mitigations.