diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-09-19 13:46:26 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-09-19 13:46:26 +0200 |
| commit | 10bd990a176969d0fa8f46831a7a99a49a035042 (patch) | |
| tree | 72d6e8baa7098f14ab5704284c9dc6c938ebf435 | |
| parent | 0bbd0fa63cef12361f0d9185213ea7460a4b1b4f (diff) | |
Add CVE-2020-24750
| -rw-r--r-- | data/CVE/list | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/data/CVE/list b/data/CVE/list index 6341c5212f..e37c3722dd 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -2198,7 +2198,11 @@ CVE-2020-24752 CVE-2020-24751 RESERVED CVE-2020-24750 (FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interact ...) - TODO: check + - jackson-databind <unfixed> + [buster] - jackson-databind <no-dsa> (Minor issue) + NOTE: https://github.com/FasterXML/jackson-databind/issues/2798 + NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default + NOTE: but still an issue when Default Typing is enabled. CVE-2020-24749 RESERVED CVE-2020-24748 |