You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2019/08/06 15:17:00 UTC

[jira] [Created] (AMQ-7266) Update Jackson databind to 2.9.9.3

Colm O hEigeartaigh created AMQ-7266:
----------------------------------------

             Summary: Update Jackson databind to 2.9.9.3
                 Key: AMQ-7266
                 URL: https://issues.apache.org/jira/browse/AMQ-7266
             Project: ActiveMQ
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
             Fix For: 5.16.0, 5.15.10


We should update Jackson databind to 2.9.9.3. Two new CVEs are issued for 2.9.9.2 (and a bug fix in 2.9.9.3):

 

[https://www.cvedetails.com/cve/CVE-2019-14379]

[https://www.cvedetails.com/cve/CVE-2019-14439|https://www.cvedetails.com/cve/CVE-2019-14379]

 



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)