Boletines de Vulnerabilidades

DSA-4114 jackson-databind - security update

   
Software afectado Debian
 
It was discovered that jackson-databind, a Java library used to parseJSON and other data formats, did not properly validate user inputbefore attempting deserialization. This allowed an attacker to performcode execution by providing maliciously crafted input.

More info:

https://www.debian.org/security/2018/dsa-4114