[CLSA-2026:1792200854] jackson-databind: Fix of CVE-2026-68497
Type:
security
Severity:
Important
Release date:
2026-10-17 01:34:24 UTC
Description:
- fix CVE-2026-68497: limit value length on Duration and XMLGregorianCalendar deserialization
CVEs fixed:
Updated packages:
  • pki-jackson-databind-2.14.1-2.el9_2.tuxcare.els7.noarch.rpm
    sha:38c87b74524d9c860cec9232bef0bc780e93ecfc236e2f3cd04052e9dc9ce5b3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.