FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

Overview

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

Affected

• jackson-databind >= 2.0.0, < 2.7.9.7
• jackson-databind >= 2.8.0, < 2.8.11.5
• jackson-databind >= 2.9.0, < 2.9.10.2
• banking_platform >= 2.4.0, <= 2.9.0
• communications_billing_and_revenue_management = 7.5.0.23.0
• communications_billing_and_revenue_management = 12.0.0.3.0
• communications_cloud_native_core_network_slice_selection_function = 1.2.1
• communications_contacts_server = 8.0.0.4.0
• communications_evolved_communications_application_server = 7.1
• communications_instant_messaging_server = 10.0.1.4.0
• communications_network_charging_and_control >= 12.0.0, <= 12.0.3
• communications_network_charging_and_control = 6.0.1
• customer_management_and_segmentation_foundation = 18.0
• enterprise_manager_base_platform = 13.3.0.0
• enterprise_manager_base_platform = 13.4.0.0
• global_lifecycle_management_opatch < 11.2.0.3.23
• global_lifecycle_management_opatch >= 12.2.0.1.0, < 12.2.0.1.19
• global_lifecycle_management_opatch >= 13.9.4.0.0, < 13.9.4.2.1
• goldengate_application_adapters = 19.1.0.0.0
• goldengate_stream_analytics < 19.1.0.0.1
• jd_edwards_enterpriseone_orchestrator < 9.2.4.2
• jd_edwards_enterpriseone_tools < 9.2.4.2
• primavera_unifier >= 17.7, <= 17.12
• primavera_unifier = 16.1
• primavera_unifier = 16.2
• primavera_unifier = 18.8
• primavera_unifier = 19.12
• retail_merchandising_system = 15.0.3
• retail_merchandising_system = 16.0.2
• retail_merchandising_system = 16.0.3
• retail_sales_audit = 14.1
• retail_xstore_point_of_service = 15.0
• retail_xstore_point_of_service = 16.0
• retail_xstore_point_of_service = 17.0
• retail_xstore_point_of_service = 18.0
• retail_xstore_point_of_service = 19.0
• siebel_engineering_-_installer_&_deployment <= 2.20.5
• siebel_ui_framework <= 20.5
• trace_file_analyzer = 12.2.0.1
• trace_file_analyzer = 18c
• trace_file_analyzer = 19c
• webcenter_portal = 12.2.1.3.0
• webcenter_portal = 12.2.1.4.0
• weblogic_server = 12.2.1.3.0
• weblogic_server = 12.2.1.4.0
• debian_linux = 8.0
• active_iq_unified_manager >= 7.3
• active_iq_unified_manager >= 9.5
• oncommand_api_services
• service_level_manager
• snapcenter
• steelstore_cloud_integrated_storage

Remediation

Upgrade past the affected range:

• jackson-databind 2.9.10.2
• global_lifecycle_management_opatch 13.9.4.2.1
• goldengate_stream_analytics 19.1.0.0.1
• jd_edwards_enterpriseone_orchestrator 9.2.4.2
• jd_edwards_enterpriseone_tools 9.2.4.2