Back to bug 30368

Who When What Removed Added
luigiwalser 2022-05-03 17:24:37 CEST Status comment Fixed upstream in 2.13.0
Whiteboard MGA8TOO
luigiwalser 2022-11-16 18:04:20 CET Status comment Fixed upstream in 2.13.0 Fixed upstream in 2.14.0-rc1
Summary jackson-databind new security issue CVE-2020-36518 jackson-databind new security issues CVE-2020-36518 and CVE-2022-4200[34]
nicolas.salguero 2024-03-13 14:25:46 CET Whiteboard MGA8TOO
CC nicolas.salguero
Version Cauldron 9
nicolas.salguero 2024-03-15 11:17:02 CET Assignee java qa-bugs
Status NEW ASSIGNED
CVE CVE-2020-36518, CVE-2022-42003, CVE-2022-42004
Source RPM jackson-databind-2.11.4-1.mga9.src.rpm jackson-databind-2.11.4-2.mga9.src.rpm
Status comment Fixed upstream in 2.14.0-rc1
tarazed25 2024-03-15 16:37:53 CET CC tarazed25
j.alberto.vc 2024-03-16 01:59:33 CET Keywords advisory
j.alberto.vc 2024-03-16 04:41:51 CET CC andrewsfarm
j.alberto.vc 2024-03-16 04:44:15 CET CC sysadmin-bugs
Whiteboard MGA9-64-OK
Keywords validated_update
bot 2024-03-16 17:29:22 CET Resolution --- FIXED
Status ASSIGNED RESOLVED

Back to bug 30368