Vulnerability Bulletins |
DSA-4037 jackson-databind - security update |
|
| Affected software | Debian |
|
It was discovered that jackson-databind, a Java library used to parseJSON and other data formats, improperly validated user input prior todeserializing: following DSA-4004-1 forCVE-2017-7525, an additional set of classes was identified as unsafefor deserialization. More info: https://www.debian.org/security/2017/dsa-4037 |
|