CLSA-2026-1794466490: TuxCare security update for com.fasterxml.jackson.core:jackson-databind (24 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 24 CVEs. Fixed in 2.2.3-tuxcare.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/com.fasterxml.jackson.core:jackson-databindto a version that resolves this vulnerability.Fixed in 2.2.3-tuxcare.6 - Upgrade
Upgrade
com.fasterxml.jackson.core:jackson-databindto a version that resolves this vulnerability.Fixed in 2.2.3-tuxcare.6
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2018-11307
- CVE-2018-14720
- CVE-2018-5968
- CVE-2019-12086
- CVE-2019-12384
- CVE-2019-12814
- CVE-2019-16335
- CVE-2019-16942
- CVE-2019-20330
- CVE-2020-10650
- CVE-2020-10673
- CVE-2020-10969
- CVE-2020-11112
- CVE-2020-14061
- CVE-2020-14062
- CVE-2020-35491
- CVE-2020-36180
- CVE-2020-36181
- CVE-2020-36184
- CVE-2020-36187
- CVE-2020-36188
- CVE-2020-36189
- CVE-2020-8840
- CVE-2020-9547
Frequently Asked Questions
Which package version contains the fixes?
The 24 CVEs are addressed in com.fasterxml.jackson.core:jackson-databind version 2.2.3-tuxcare.6.
How can I determine whether this update is relevant to my environment?
Check whether your environment uses the TuxCare rebuild of com.fasterxml.jackson.core:jackson-databind and compare its installed version with 2.2.3-tuxcare.6. The provided information does not identify affected configurations or exploit prerequisites.