Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-20330

Fixed in a distro release EPSS 9%CVSS 9.8

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

Published 2020-01-03 · CVE record · OSV

Products: FasterXML jackson-databind, oracle banking_platform, oracle communications_billing_and_revenue_management, oracle communications_cloud_native_core_network_slice_selection_function, oracle communications_contacts_server, oracle communications_evolved_communications_application_server, oracle communications_instant_messaging_server, oracle communications_network_charging_and_control, oracle customer_management_and_segmentation_foundation, oracle enterprise_manager_base_platform, oracle global_lifecycle_management_opatch, oracle goldengate_application_adapters, oracle goldengate_stream_analytics, oracle jd_edwards_enterpriseone_orchestrator, oracle jd_edwards_enterpriseone_tools, oracle primavera_unifier, oracle retail_merchandising_system, oracle retail_sales_audit, oracle retail_xstore_point_of_service, oracle siebel_engineering_-_installer_&_deployment, oracle siebel_ui_framework, oracle trace_file_analyzer, oracle webcenter_portal, oracle weblogic_server, debian_linux, netapp active_iq_unified_manager, netapp oncommand_api_services, netapp service_level_manager, netapp snapcenter, netapp steelstore_cloud_integrated_storage

Fixed upstream

EcosystemPackageFixed in
Mavencom.fasterxml.jackson.core:jackson-databind2.6.7.4
Mavencom.fasterxml.jackson.core:jackson-databind2.7.9.7
Mavencom.fasterxml.jackson.core:jackson-databind2.8.11.5
Mavencom.fasterxml.jackson.core:jackson-databind2.9.10.2

Distro releases

ReleasePackageFixed in
Chainguardeco-java-gradle-2.10no fix
Chainguardeco-java-gradle-2.11no fix
Chainguardeco-java-gradle-2.12no fix
Chainguardeco-java-gradle-2.13no fix
Chainguardeco-java-gradle-2.14no fix
Chainguardeco-java-gradle-2.14.1no fix
Chainguardeco-java-gradle-2.4no fix
Chainguardeco-java-gradle-2.5no fix
Chainguardeco-java-gradle-2.6no fix
Chainguardeco-java-gradle-2.7no fix
Chainguardeco-java-gradle-2.8no fix
Chainguardeco-java-gradle-2.9no fix
Chainguardeco-java-gradle-3.0no fix
Chainguardeco-java-gradle-3.1no fix
Chainguardeco-java-gradle-3.2no fix
Chainguardeco-java-gradle-3.2.1no fix
Chainguardeco-java-gradle-3.3no fix
Chainguardeco-java-gradle-3.4no fix
Chainguardeco-java-gradle-3.4.1no fix
Chainguardeco-java-gradle-3.5no fix
Chainguardeco-java-gradle-3.5.1no fix
Chainguardeco-java-gradle-4.0no fix
Chainguardeco-java-gradle-4.0.1no fix
Chainguardeco-java-gradle-4.0.2no fix
Chainguardeco-java-gradle-4.1no fix
Chainguardeco-java-gradle-4.10no fix
Chainguardeco-java-gradle-4.10.1no fix
Chainguardeco-java-gradle-4.10.2no fix
Chainguardeco-java-gradle-4.10.3no fix
Chainguardeco-java-gradle-4.2no fix
Chainguardeco-java-gradle-4.2.1no fix
Chainguardeco-java-gradle-4.3no fix
Chainguardeco-java-gradle-4.3.1no fix
Chainguardeco-java-gradle-4.4no fix
Chainguardeco-java-gradle-4.4.1no fix
Chainguardeco-java-gradle-4.5no fix
Chainguardeco-java-gradle-4.5.1no fix
Chainguardeco-java-gradle-4.6no fix
Chainguardeco-java-gradle-4.7no fix
Chainguardeco-java-gradle-4.8no fix
Chainguardeco-java-gradle-4.8.1no fix
Chainguardeco-java-gradle-4.9no fix
Chainguardeco-java-gradle-5.0no fix
Chainguardeco-java-gradle-5.1no fix
Chainguardeco-java-gradle-5.1.1no fix
Chainguardeco-java-gradle-5.2no fix
Chainguardeco-java-gradle-5.2.1no fix
Chainguardeco-java-gradle-5.3no fix
Chainguardeco-java-gradle-5.3.1no fix
Chainguardeco-java-gradle-5.4no fix
Chainguardeco-java-gradle-5.4.1no fix
Chainguardeco-java-gradle-5.5no fix
Chainguardeco-java-gradle-5.5.1no fix
Chainguardeco-java-gradle-5.6no fix
Chainguardeco-java-gradle-5.6.1no fix
Chainguardeco-java-gradle-5.6.2no fix
Chainguardeco-java-gradle-5.6.3no fix
Chainguardeco-java-gradle-5.6.4no fix
Chainguardeco-java-gradle-6.0no fix
Chainguardeco-java-gradle-6.0.1no fix
Chainguardeco-java-gradle-6.1no fix
Chainguardeco-java-gradle-6.1.1no fix
Chainguardeco-java-gradle-6.2no fix
Chainguardeco-java-gradle-6.2.1no fix
Chainguardeco-java-gradle-6.2.2no fix
Chainguardhadoop-fips-3.3.6no fix
Chainguardhadoop-fips-3.4.2no fix
Chainguardhadoop-fips-3.5no fix
Debian 12jackson-databind2.10.1-1
Debian 13jackson-databind2.10.1-1
Debian 14jackson-databind2.10.1-1
Debian 8jackson-databind2.4.2-2+deb8u11
Red Hat Enterprise Linux 8apache-commons-collections0:3.2.2-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8apache-commons-lang0:2.6-21.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8bea-stax0:1.2.0-16.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8bea-stax-api0:1.2.0-16.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-fastinfoset0:1.2.13-9.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-jaxb0:2.2.11-11.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-jaxb-api0:2.2.12-8.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-jaxb-core0:2.2.11-11.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-jaxb-runtime0:2.2.11-11.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8glassfish-jaxb-txw20:2.2.11-11.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8jackson-annotations0:2.10.0-1.module+el8.2.0+5059+3eb3af25
Red Hat Enterprise Linux 8jackson-core0:2.10.0-1.module+el8.2.0+5059+3eb3af25
Red Hat Enterprise Linux 8jackson-databind0:2.10.0-1.module+el8.2.0+5059+3eb3af25
Red Hat Enterprise Linux 8jackson-jaxrs-json-provider0:2.9.9-1.module+el8.1.0+3832+9784644d
Red Hat Enterprise Linux 8jackson-jaxrs-providers0:2.9.9-1.module+el8.1.0+3832+9784644d
Red Hat Enterprise Linux 8jackson-module-jaxb-annotations0:2.7.6-4.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8jakarta-commons-httpclient1:3.1-28.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8javassist0:3.18.1-8.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8javassist-javadoc0:3.18.1-8.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8jss0:4.6.2-4.module+el8.2.0+6123+b4678599
Red Hat Enterprise Linux 8jss-debuginfo0:4.6.2-4.module+el8.2.0+6123+b4678599
Red Hat Enterprise Linux 8jss-debugsource0:4.6.2-4.module+el8.2.0+6123+b4678599
Red Hat Enterprise Linux 8jss-javadoc0:4.6.2-4.module+el8.2.0+6123+b4678599
Red Hat Enterprise Linux 8ldapjdk0:4.21.0-2.module+el8.2.0+4573+c3c38c7b
Red Hat Enterprise Linux 8ldapjdk-javadoc0:4.21.0-2.module+el8.2.0+4573+c3c38c7b
Red Hat Enterprise Linux 8pki-base0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-base-java0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-ca0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-core0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-core-debuginfo0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-core-debugsource0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-kra0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-server0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-servlet-4.0-api1:9.0.7-16.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8pki-servlet-engine1:9.0.7-16.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8pki-symkey0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-symkey-debuginfo0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-tools0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8pki-tools-debuginfo0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8python-nss0:1.0.1-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8python-nss-debugsource0:1.0.1-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8python-nss-doc0:1.0.1-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8python3-nss0:1.0.1-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8python3-nss-debuginfo0:1.0.1-10.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8python3-pki0:10.8.3-1.module+el8.2.0+5925+bad5981a
Red Hat Enterprise Linux 8relaxngDatatype0:2011.1-7.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8resteasy0:3.0.26-3.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8slf4j0:1.7.25-4.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8slf4j-jdk140:1.7.25-4.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8stax-ex0:1.7.7-8.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8tomcatjss0:7.4.1-2.module+el8.2.0+4573+c3c38c7b
Red Hat Enterprise Linux 8velocity0:1.7-24.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xalan-j20:2.7.1-38.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xerces-j20:2.11.0-34.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xml-commons-apis0:1.4.01-25.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xml-commons-resolver0:1.2-26.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xmlstreambuffer0:1.5.4-8.module+el8.1.0+3366+6dfb954c
Red Hat Enterprise Linux 8xsom0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c
Red Hat satellite 6.6candlepin0:2.6.16-1.el7sat
Red Hat satellite 6.6candlepin-selinux0:2.6.16-1.el7sat
Red Hat satellite 6.6foreman0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-cli0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-debug0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-ec20:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-gce0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-journald0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-libvirt0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-openstack0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-ovirt0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-postgresql0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-rackspace0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-telemetry0:1.22.0.39-2.el7sat
Red Hat satellite 6.6foreman-vmware0:1.22.0.39-2.el7sat
Red Hat satellite 6.6satellite0:6.6.3-1.el7sat
Red Hat satellite 6.6satellite-capsule0:6.6.3-1.el7sat
Red Hat satellite 6.6satellite-cli0:6.6.3-1.el7sat
Red Hat satellite 6.6satellite-common0:6.6.3-1.el7sat
Red Hat satellite 6.6satellite-debug-tools0:6.6.3-1.el7sat
Red Hat satellite 6.6tfm-rubygem-fog-ovirt0:1.2.3-1.el7sat
Red Hat satellite 6.6tfm-rubygem-foreman_rh_cloud0:0.9.4.1-2.el7sat
Red Hat satellite 6.6tfm-rubygem-katello0:3.12.0.41-1.el7sat
Red Hat satellite 6.6tfm-rubygem-runcible0:2.13.0-1.el7sat
Red Hat satellite 6.7candlepin0:2.9.28-1.el7sat
Red Hat satellite 6.7candlepin-selinux0:2.9.28-1.el7sat
Red Hat satellite 6.7foreman0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-cli0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-debug0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-ec20:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-gce0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-installer1:1.24.1.21-1.el7sat
Red Hat satellite 6.7foreman-installer-katello1:1.24.1.21-1.el7sat
Red Hat satellite 6.7foreman-journald0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-libvirt0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-openstack0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-ovirt0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-postgresql0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-rackspace0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-telemetry0:1.24.1.24-1.el7sat
Red Hat satellite 6.7foreman-vmware0:1.24.1.24-1.el7sat
Red Hat satellite 6.7pulp-rpm0:2.21.0.6-1.el7sat
Red Hat satellite 6.7pulp-rpm-admin-extensions0:2.21.0.6-1.el7sat
Red Hat satellite 6.7pulp-rpm-plugins0:2.21.0.6-1.el7sat
Red Hat satellite 6.7python-pulp-integrity0:2.21.0.6-1.el7sat
Red Hat satellite 6.7python-pulp-rpm-common0:2.21.0.6-1.el7sat
Red Hat satellite 6.7satellite0:6.7.2-1.el7sat
Red Hat satellite 6.7satellite-capsule0:6.7.2-1.el7sat
Red Hat satellite 6.7satellite-cli0:6.7.2-1.el7sat
Red Hat satellite 6.7satellite-common0:6.7.2-1.el7sat
Red Hat satellite 6.7satellite-debug-tools0:6.7.2-1.el7sat
Red Hat satellite 6.7tfm-rubygem-fog-vsphere0:3.2.1.1-1.el7sat
Red Hat satellite 6.7tfm-rubygem-foreman-tasks0:0.17.5.6-1.el7sat
Red Hat satellite 6.7tfm-rubygem-foreman_remote_execution0:2.0.10.1-1.el7sat
Red Hat satellite 6.7tfm-rubygem-foreman_remote_execution-cockpit0:2.0.10.1-1.el7sat
Red Hat satellite 6.7tfm-rubygem-foreman_rh_cloud0:1.0.9-1.el7sat
Red Hat satellite 6.7tfm-rubygem-hammer_cli_foreman0:0.19.6.5-1.el7sat
Red Hat satellite 6.7tfm-rubygem-katello0:3.14.0.25-1.el7sat
Red Hat satellite capsule 6.6foreman0:1.22.0.39-2.el7sat
Red Hat satellite capsule 6.6foreman-debug0:1.22.0.39-2.el7sat
Red Hat satellite capsule 6.6satellite0:6.6.3-1.el7sat
Red Hat satellite capsule 6.6satellite-capsule0:6.6.3-1.el7sat
Red Hat satellite capsule 6.6satellite-common0:6.6.3-1.el7sat
Red Hat satellite capsule 6.6satellite-debug-tools0:6.6.3-1.el7sat
Red Hat satellite capsule 6.7foreman0:1.24.1.24-1.el7sat
Red Hat satellite capsule 6.7foreman-debug0:1.24.1.24-1.el7sat
Red Hat satellite capsule 6.7foreman-installer1:1.24.1.21-1.el7sat
Red Hat satellite capsule 6.7foreman-installer-katello1:1.24.1.21-1.el7sat
Red Hat satellite capsule 6.7pulp-rpm0:2.21.0.6-1.el7sat
Red Hat satellite capsule 6.7pulp-rpm-admin-extensions0:2.21.0.6-1.el7sat
Red Hat satellite capsule 6.7pulp-rpm-plugins0:2.21.0.6-1.el7sat
Red Hat satellite capsule 6.7python-pulp-integrity0:2.21.0.6-1.el7sat
Red Hat satellite capsule 6.7python-pulp-rpm-common0:2.21.0.6-1.el7sat
Red Hat satellite capsule 6.7satellite0:6.7.2-1.el7sat
Red Hat satellite capsule 6.7satellite-capsule0:6.7.2-1.el7sat
Red Hat satellite capsule 6.7satellite-common0:6.7.2-1.el7sat
Red Hat satellite capsule 6.7satellite-debug-tools0:6.7.2-1.el7sat
Rocky Linux 8apache-commons-collections0:3.2.2-10.module+el8.3.0+53+ea062990
Rocky Linux 8apache-commons-collections0:3.2.2-10.module+el8.3.0+74+855e3f5d
Rocky Linux 8apache-commons-lang0:2.6-21.module+el8.3.0+53+ea062990
Rocky Linux 8apache-commons-lang0:2.6-21.module+el8.3.0+74+855e3f5d
Rocky Linux 8bea-stax0:1.2.0-16.module+el8.3.0+53+ea062990
Rocky Linux 8glassfish-fastinfoset0:1.2.13-9.module+el8.3.0+53+ea062990
Rocky Linux 8glassfish-jaxb0:2.2.11-11.module+el8.3.0+53+ea062990
Rocky Linux 8glassfish-jaxb-api0:2.2.12-8.module+el8.3.0+53+ea062990
Rocky Linux 8jackson-annotations0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux 8jackson-core0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux 8jackson-databind0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux 8jackson-jaxrs-providers0:2.9.9-1.module+el8.3.0+53+ea062990
Rocky Linux 8jackson-module-jaxb-annotations0:2.7.6-4.module+el8.3.0+53+ea062990
Rocky Linux 8jakarta-commons-httpclient1:3.1-28.module+el8.3.0+53+ea062990
Rocky Linux 8jakarta-commons-httpclient1:3.1-28.module+el8.3.0+74+855e3f5d
Rocky Linux 8javassist0:3.18.1-8.module+el8.3.0+53+ea062990
Rocky Linux 8javassist0:3.18.1-8.module+el8.3.0+74+855e3f5d
Rocky Linux 8python-nss0:1.0.1-10.module+el8.3.0+53+ea062990
Rocky Linux 8relaxngDatatype0:2011.1-7.module+el8.3.0+53+ea062990
Rocky Linux 8resteasy0:3.0.26-3.module+el8.3.0+53+ea062990
Rocky Linux 8slf4j0:1.7.25-4.module+el8.5.0+697+f586bb30
Rocky Linux 8slf4j0:1.7.25-4.module+el8.3.0+74+855e3f5d
Rocky Linux 8slf4j0:1.7.25-4.module+el8.3.0+133+b8b54b58
Rocky Linux 8stax-ex0:1.7.7-8.module+el8.3.0+53+ea062990
Rocky Linux 8velocity0:1.7-24.module+el8.3.0+53+ea062990
Rocky Linux 8velocity0:1.7-24.module+el8.3.0+74+855e3f5d
Rocky Linux 8xalan-j20:2.7.1-38.module+el8.3.0+53+ea062990
Rocky Linux 8xalan-j20:2.7.1-38.module+el8.3.0+74+855e3f5d
Rocky Linux 8xerces-j20:2.11.0-34.module+el8.3.0+53+ea062990
Rocky Linux 8xerces-j20:2.11.0-34.module+el8.3.0+74+855e3f5d
Rocky Linux 8xml-commons-apis0:1.4.01-25.module+el8.3.0+74+855e3f5d
Rocky Linux 8xml-commons-apis0:1.4.01-25.module+el8.5.0+697+f586bb30
Rocky Linux 8xml-commons-apis0:1.4.01-25.module+el8.3.0+53+ea062990
Rocky Linux 8xml-commons-resolver0:1.2-26.module+el8.3.0+53+ea062990
Rocky Linux 8xml-commons-resolver0:1.2-26.module+el8.3.0+74+855e3f5d
Rocky Linux 8xmlstreambuffer0:1.5.4-8.module+el8.3.0+53+ea062990
Rocky Linux 8xsom0:0-19.20110809svn.module+el8.3.0+53+ea062990
Ubuntu 18.04 LTSjackson-databindno fix
Ubuntu Pro 14.04 LTSjackson-databindno fix
Ubuntu Pro 16.04 LTSjackson-databind2.4.2-3ubuntu0.1~esm2