Download
| Alert*
|
oval:org.secpod.oval:def:2003910
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. oval:org.secpod.oval:def:69547 The Public Key Infrastructure Core contains fundamental packages required by Red Hat Certificate System. Security Fix: * jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig * jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource * jackson-databind: Se ... oval:org.secpod.oval:def:2500199 The Public Key Infrastructure Core contains fundamental packages required by AlmaLinux Certificate System. |
