Debian Security Update DSA-4004 jackson-databind - security update

[LinuxBot]

Liao Xinxi discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attemtping deserialization. This allowed an attacker to perform code execution by providing maliciously crafted input.

Continue reading...