Vulnerability Bulletins |
DSA-4004 jackson-databind - security update |
|
| Affected software | Debian |
|
Liao Xinxi discovered that jackson-databind, a Java library used toparse JSON and other data formats, did not properly validate userinput before attemtping deserialization. This allowed an attacker toperform code execution by providing maliciously crafted input. More info: https://www.debian.org/security/2017/dsa-4004 |
|