[CLSA-2026:1791984617] jackson-databind: Fix of CVE-2026-68497
Type:
security
Severity:
Important
Release date:
2026-10-14 13:30:29 UTC
Description:
- CVE-2026-68497: limit length of Duration and XMLGregorianCalendar string values to StreamReadConstraints maxNumberLength in CoreXMLDeserializers.Std._deserialize
CVEs fixed:
Updated packages:
  • pki-jackson-databind-2.19.1-1.el9_6.tuxcare.els5.noarch.rpm
    sha:2a49ad771052181829b9abd68535a8f1451dc44ad707e5e442fd0100f1036ff2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.