[Git][security-tracker-team/security-tracker][master] Add CVE-2026-68498/jackson-core

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
02d1e44a by Salvatore Bonaccorso at 2026-10-17T11:13:17+02:00
Add CVE-2026-68498/jackson-core

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46,7 +46,10 @@ CVE-2026-68573 (Improper Authentication vulnerability in Apache Kylin. Unauthent
 CVE-2026-68572 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-68498 (StreamReadConstraints.maxNameLength (default 50,000 characters) is int ...)
-	TODO: check
+	- jackson-core 2.18.11-1
+	NOTE: https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99
+	NOTE: https://github.com/FasterXML/jackson-core/pull/1643
+	NOTE: Fixed by: https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075 (jackson-core-3.2.2, jackson-core-3.1.6, jackson-core-2.22.2, jackson-core-2.21.6, ackson-core-2.18.10)
 CVE-2026-64862 (Frappe HR is an open-source human resources management solution (HRMS) ...)
 	NOT-FOR-US: Frappe
 CVE-2026-62438 (A flaw was found in GIMP. An attacker can cause a Denial of Service (D ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02d1e44a1dfd4d2e3606f177210797c38e6fb740

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02d1e44a1dfd4d2e3606f177210797c38e6fb740
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/35f6d128/attachment-0001.htm>