CLSA-2026-1794225369: TuxCare security update for com.fasterxml.jackson.core:jackson-databind (18 CVEs)

The 18 CVE fixes are included in com.fasterxml.jackson.core:jackson-databind version 2.9.7-tuxcare.5.

Update the TuxCare rebuild of com.fasterxml.jackson.core:jackson-databind to version 2.9.7-tuxcare.5.

Published Nov 9, 2026

Updated

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 18 CVEs. Fixed in 2.9.7-tuxcare.5.

Affected Software

1 affected componentFixes available

tuxcare/com.fasterxml.jackson.core:jackson-databind>=2.9.7<2.9.7-tuxcare.5

2.9.7-tuxcare.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/com.fasterxml.jackson.core:jackson-databind to a version that resolves this vulnerability.
Fixed in 2.9.7-tuxcare.5
Upgrade
Upgrade com.fasterxml.jackson.core:jackson-databind to a version that resolves this vulnerability.
Fixed in 2.9.7-tuxcare.5

Nov 9, 2026

Advisory Published

via OSV·12:56 PM

Data Sourced

via OSV·12:56 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The 18 CVE fixes are included in com.fasterxml.jackson.core:jackson-databind version 2.9.7-tuxcare.5.

Update the TuxCare rebuild of com.fasterxml.jackson.core:jackson-databind to version 2.9.7-tuxcare.5.