Actions
Bug #21927
closed
Jackson-databind used in oauth has CVE
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No
Description
jackson-databind-2.12.3.jar: CVE-2022-42003(7.5), CVE-2022-42004(7.5)
Updated by François ARMAND about 2 years ago
- Status changed from New to In progress
- Assignee set to François ARMAND
Updated by François ARMAND about 2 years ago
- Status changed from In progress to Pending technical review
- Assignee changed from François ARMAND to Alexis Mousset
- Pull Request set to https://github.com/Normation/rudder-plugins/pull/509
Updated by Anonymous about 2 years ago
- Status changed from Pending technical review to Pending release
Applied in changeset commit:rudder-plugins|da83bd8b9d326b9ba922c0c7de61dcbbb5769def.
Updated by Vincent MEMBRÉ about 2 years ago
- Fix check changed from To do to Checked
Updated by Vincent MEMBRÉ about 2 years ago
- Status changed from Pending release to Released
This bug has been fixed in Rudder 6.2.20, 7.1.7 and 7.2.1 which were released today.
Updated by Vincent MEMBRÉ about 2 years ago
- Project changed from Rudder to Authentication backends
- Target version changed from 6.2.20 to 6.2-1.12
Updated by François ARMAND about 2 years ago
- Related to Bug #21992: New CVE in Jackson-Databind 2.13.4 added
Updated by Vincent MEMBRÉ over 1 year ago
This bug has been fixed in Rudder plugin auth-backends v7.2.1-2.5
Actions