[Git][security-tracker-team/security-tracker][master] Add CVE-2019-14540/jackson-databind

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b062af15 by Salvatore Bonaccorso at 2019-09-16T13:11:18Z
Add CVE-2019-14540/jackson-databind

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5112,7 +5112,9 @@ CVE-2019-14541 (GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_prog
 	[jessie] - open-cobol <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/open-cobol/bugs/584/
 CVE-2019-14540 (A Polymorphic Typing issue was discovered in FasterXML jackson-databin ...)
-	TODO: check
+	- jackson-databind <unfixed>
+	NOTE: https://github.com/FasterXML/jackson-databind/issues/2410
+	NOTE: https://github.com/FasterXML/jackson-databind/issues/2449
 CVE-2019-14539
 	RESERVED
 CVE-2019-14538



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b062af153671cd643f7de3a9268e5bbd6426d6bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b062af153671cd643f7de3a9268e5bbd6426d6bd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190916/5173cc60/attachment.html>