[MODLOGSAML-136] RMB 33.2.8 jackson-databind 2.13.2.1 (CVE-2020-36518) - FOLIO Issue Tracker

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: P3
Resolution: Done
Affects Version/s: None
Fix Version/s: 2.4.4
Labels:
- security
- security-reviewed

Template:

Standard Bug Write-Up Format
Sprint:
CP: sprint 136, CP: sprint 137
Story Points:
1
Development Team:
Core: Platform
RCA Group:
TBD

Description

Update RMB to 33.2.8 to get jackson-databind 2.13.2.1 fixing stack overflow DoS https://nvd.nist.gov/vuln/detail/CVE-2020-36518

TestRail: Results

Attachments

Activity

People

Assignee:: Julian Ladisch

Reporter:: Julian Ladisch

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 01/Apr/22 6:19 AM

Updated:: 13/Apr/22 2:42 PM

Resolved:: 13/Apr/22 2:42 PM

TestRail: Runs

TestRail: Cases