{"schema_version":"1.7.3","id":"SUSE-SU-2022:1678-1","published":"2022-05-16T08:19:25Z","modified":"2026-02-04T03:56:10.873321Z","related":["CVE-2020-25649","CVE-2020-28491","CVE-2020-36518"],"upstream":["CVE-2020-25649","CVE-2020-28491","CVE-2020-36518"],"summary":"Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core","details":"This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of nested objects in jackson-databind. (bsc#1197132)\n- CVE-2020-25649: Fixed an insecure entity expansion in jackson-databind which was vulnerable to XML external entity (XXE). (bsc#1177616)\n- CVE-2020-28491: Fixed a bug which could cause `java.lang.OutOfMemoryError` exception in jackson-dataformats-binary. (bsc#1182481)\n\nNon security fixes:\n\njackson-annotations - update from version 2.10.2 to version 2.13.0:\n\n   + Build with source/target levels 8\n   + Add 'mvnw' wrapper\n   + 'JsonSubType.Type' should accept array of names\n   + Jackson version alignment with Gradle 6\n   + Add '@JsonIncludeProperties'\n   + Add '@JsonTypeInfo(use=DEDUCTION)'\n   + Ability to use '@JsonAnyGetter' on fields\n   + Add '@JsonKey' annotation\n   + Allow repeated calls to 'SimpleObjectIdResolver.bindItem()' for same mapping\n   + Add 'namespace' property for '@JsonProperty' (for XML module)\n   + Add target 'ElementType.ANNOTATION_TYPE' for '@JsonEnumDefaultValue'\n   + 'JsonPattern.Value.pattern' retained as '', never (accidentally) exposed as 'null'\n   + Rewrite to use `ant` for building in order to be able to use it in packages that have to be built before maven\n\njackson-bom - update from version 2.10.2 to version 2.13.0:\n\n   + Configure moditect plugin with '<jvmVersion>11</jvmVersion>'\n   + jackson-bom manages the version of 'junit:junit'\n   + Drop 'jackson-datatype-hibernate3' (support for Hibernate 3.x datatypes)\n   + Removed 'jakarta' classifier variants of JAXB/JSON-P/JAX-RS modules due to the addition of new Jakarta artifacts\n     (Jakarta-JSONP, Jakarta-xmlbind-annotations, Jakarta-rs-providers)\n   + Add version for 'jackson-datatype-jakarta-jsonp' module (introduced after 2.12.2)\n   + Add (beta) version for 'jackson-dataformat-toml'\n   + Jakarta 9 artifact versions are missing from jackson-bom\n   + Add default settings for 'gradle-module-metadata-maven-plugin' (gradle metadata)\n   + Add default settings for 'build-helper-maven-plugin'\n   + Drop 'jackson-module-scala_2.10' entry (not released for Jackson 2.12 or later)\n   + Add override for 'version.plugin.bundle' (for 5.1.1) to help build on JDK 15+\n   + Add missing version for jackson-datatype-eclipse-collections\n    \njackson-core - update from version 2.10.2 to version 2.13.0:\n\n   + Build with source and target levels 8\n   + Misleading exception for input source when processing byte buffer with start offset\n   + Escape contents of source document snippet for 'JsonLocation._appendSourceDesc()'\n   + Add 'StreamWriteException' type to eventually replace 'JsonGenerationException'\n   + Replace 'getCurrentLocation()'/'getTokenLocation()' with 'currentLocation()'/'currentTokenLocation()' in \n     'JsonParser'\n   + Replace 'JsonGenerator.writeObject()' (and related) with 'writePOJO()'\n   + Replace 'getCurrentValue()'/'setCurrentValue()' with 'currentValue()'/'assignCurrentValue()' in \n     'JsonParser'/'JsonGenerator\n   + Introduce O(n^1.5) BigDecimal parser implementation\n   + ByteQuadsCanonicalizer.addName(String, int, int) has incorrect handling for case of q2 == null\n   + UTF32Reader ArrayIndexOutOfBoundsException\n   + Improve exception/JsonLocation handling for binary content: don't show content, include byte offset\n   + Fix an issue with the TokenFilter unable to ignore properties when deserializing.\n   + Optimize array allocation by 'JsonStringEncoder'\n   + Add 'mvnw' wrapper\n   + (partial) Optimize array allocation by 'JsonStringEncoder'\n   + Add back accidentally removed 'JsonStringEncoder' related methods in 'BufferRecyclers' \n     (like 'getJsonStringEncoder()')\n   + 'ArrayOutOfBoundException' at 'WriterBasedJsonGenerator.writeString(Reader, int)'\n   + Allow 'optional-padding' for 'Base64Variant'\n   + More customizable TokenFilter inclusion (using 'Tokenfilter.Inclusion')\n   + Publish Gradle Module Metadata\n   + Add 'StreamReadCapability' for further format-based/format-agnostic handling improvements\n   + Add 'JsonParser.isExpectedNumberIntToken()' convenience method\n   + Add 'StreamWriteCapability' for further format-based/format-agnostic handling improvements\n   + Add 'JsonParser.getNumberValueExact()' to allow precision-retaining buffering\n   + Limit initial allocated block size by 'ByteArrayBuilder' to max block size\n   + Add 'JacksonException' as parent class of 'JsonProcessingException'\n   + Make 'JsonWriteContext.reset()' and 'JsonReadContext.reset()' methods public\n   + Deprecate 'JsonParser.getCurrentTokenId()' (use '#currentTokenId()' instead)\n   + Full 'LICENSE' included in jar for easier access by compliancy tools\n   + Fix NPE in 'writeNumber(String)' method of 'UTF8JsonGenerator', 'WriterBasedJsonGenerator'\n   + Add a String Array write method in the Streaming API\n   + Synchronize variants of 'JsonGenerator#writeNumberField' with 'JsonGenerator#writeNumber'\n   + Add JsonGenerator#writeNumber(char[], int, int) method\n   + Do not clear aggregated contents of 'TextBuffer' when 'releaseBuffers()' called\n   + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)'\n   + Optionally allow leading decimal in float tokens\n   + Rewrite to use ant for building in order to be able to use it in packages that have to be built before maven\n   + Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results in endless stream of 'VALUE_NULL' tokens\n   + Handle case when system property access is restricted\n   + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)'\n   + DataFormatMatcher#getMatchedFormatName throws NPE when no match exists\n   + 'JsonParser.getCurrentLocation()' byte/char offset update incorrectly for big payloads \n\njackson-databind - update from version 2.10.5.1 to  version 2.13.0:\n\n   + '@JsonValue' with integer for enum does not deserialize correctly\n   + 'AnnotatedMethod.getValue()/setValue()' doesn't have useful exception message\n   + Add 'DatabindException' as intermediate subtype of 'JsonMappingException'\n   + Jackson does not support deserializing new Java 9 unmodifiable collections\n   + Allocate TokenBuffer instance via context objects (to\n      allow format-specific buffer types)\n   + Add mechanism for setting default 'ContextAttributes' for 'ObjectMapper'\n   + Add 'DeserializationContext.readTreeAsValue()' methods\n      for more convenient conversions for deserializers to use\n   + Clean up support of typed 'unmodifiable', 'singleton'\n      Maps/Sets/Collections\n   + Extend internal bitfield of 'MapperFeature' to be\n      'long'\n   + Add 'removeMixIn()' method in 'MapperBuilder'\n   + Backport 'MapperBuilder' lambda-taking methods:\n      'withConfigOverride()', 'withCoercionConfig()',\n      'withCoercionConfigDefaults()'\n   + configOverrides(boolean.class) silently ignored,\n      whereas .configOverride(Boolean.class) works for both\n      primitives and boxed boolean values\n   + Dont track unknown props in buffer if\n      'ignoreAllUnknown' is true\n   + Should allow deserialization of java.time types via\n      opaque 'JsonToken.VALUE_EMBEDDED_OBJECT'\n   + Optimize 'AnnotatedConstructor.call()' case by passing\n      explicit null\n   + Add AnnotationIntrospector.XmlExtensions interface for\n      decoupling javax dependencies\n   + Custom SimpleModule not included in list returned by\n      ObjectMapper.getRegisteredModuleIds() after registration\n   + Use more limiting default visibility settings for JDK\n      types (java.*, javax.*)\n   + Deep merge for 'JsonNode' using 'ObjectReader.readTree()'\n   + IllegalArgumentException: Conflicting setter\n      definitions for property with more than 2 setters\n   + Serializing java.lang.Thread fails on JDK 11 and above\n   + String-based 'Map' key deserializer is not\n      deterministic when there is no single arg constructor\n   + Add ArrayNode#set(int index, primitive_type value)\n   + JsonStreamContext 'currentValue' wrongly references to\n      '@JsonTypeInfo' annotated object\n   + DOM 'Node' serialization omits the default namespace\n      declaration\n   + Support 'suppressed' property when deserializing 'Throwable'\n   + 'AnnotatedMember.equals()' does not work reliably\n   + Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for Scala module\n   + For an absent property Jackson injects 'NullNode'\n      instead of 'null' to a JsonNode-typed constructor argument of\n      a '@ConstructorProperties'-annotated constructor\n   + 'XMLGregorianCalendar' doesn't work with default typing\n   + Content 'null' handling not working for root values\n   + StdDeserializer rejects blank (all-whitespace) strings\n      for ints\n   + 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with\n      'DefaultTypeResolverBuilder'\n   + Add PropertyNamingStrategies.UpperSnakeCaseStrategy\n      (and UPPER_SNAKE_CASE constant)\n   + StackOverflowError when serializing JsonProcessingException\n   + Support for BCP 47 'java.util.Locale' serialization/deserialization\n   + String property deserializes null as 'null' for\n      JsonTypeInfo.As.EXISTING_PROPERTY\n   + Can not deserialize json to enum value with\n      Object-/Array-valued input, '@JsonCreator'\n   + Fix to avoid problem with 'BigDecimalNode', scale of\n      'Integer.MIN_VALUE'\n   + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover\n      coercion from (Empty) String via 'AsNull'\n   + Add 'mvnw' wrapper\n   + (regression) Factory method generic type resolution\n      does not use Class-bound type parameter\n   + Deserialization of 'empty' subtype with DEDUCTION failed\n   + Merge findInjectableValues() results in\n      AnnotationIntrospectorPair\n   + READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't\n      work with empty strings\n   + 'TypeFactory' cannot convert 'Collection' sub-type\n      without type parameters to canonical form and back\n    + Fix for [modules-java8#207]: prevent fail on secondary Java 8\n      date/time types\n   + EXTERNAL_PROPERTY does not work well with '@JsonCreator'\n      and 'FAIL_ON_UNKNOWN_PROPERTIES'\n   + String property deserializes null as 'null' for\n     'JsonTypeInfo.As.EXTERNAL_PROPERTY'\n   + Property ignorals cause 'BeanDeserializer 'to forget\n      how to read from arrays (not copying\n      '_arrayDelegateDeserializer')\n   + UntypedObjectDeserializer' mixes multiple unwrapped\n      collections (related to #2733)\n   + Two cases of incorrect error reporting about\n      DeserializationFeature\n   + Bug in polymorphic deserialization with '@JsonCreator',\n      '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY'\n   + Polymorphic subtype deduction ignores 'defaultImpl'\n      attribute\n   + MismatchedInputException: Cannot deserialize instance\n      of 'com.fasterxml.jackson.databind.node.ObjectNode' out of\n      VALUE_NULL token\n   + Missing override for 'hasAsKey()' in\n      'AnnotationIntrospectorPair'\n   + Creator lookup fails with 'InvalidDefinitionException'\n      for conflict between single-double/single-Double arg constructor\n   + 'MapDeserializer' forcing 'JsonMappingException'\n      wrapping even if WRAP_EXCEPTIONS set to false\n   + Auto-detection of constructor-based creator method\n      skipped if there is an annotated factory-based creator method\n      (regression from 2.11)\n   + 'ObjectMapper.treeToValue()' no longer invokes\n      'JsonDeserializer.getNullValue()'\n   + DeserializationProblemHandler is not invoked when\n      trying to deserialize String\n   + Fix failing 'double' JsonCreators in jackson 2.12.0\n   + Conflicting in POJOPropertiesCollector when having\n      namingStrategy\n   + Breaking API change in 'BasicClassIntrospector' (2.12.0)\n   + 'JsonNode.requiredAt()' does NOT fail on some path expressions\n   + Exception thrown when 'Collections.synchronizedList()'\n      is serialized with type info, deserialized\n   + Add option to resolve type from multiple existing\n      properties, '@JsonTypeInfo(use=DEDUCTION)'\n   + '@JsonIgnoreProperties' does not prevent Exception\n      Conflicting getter/setter definitions for property\n   + Deserialization Not Working Right with Generic Types and\n      Builders\n   + Add '@JsonIncludeProperties(propertyNames)' (reverse of\n      '@JsonIgnoreProperties')\n   + '@JsonAnyGetter' should be allowed on a field\n   + Allow handling of single-arg constructor as property\n      based by default\n   + Allow case insensitive deserialization of String value\n      into 'boolean'/'Boolean' (esp for Excel)\n   + Allow use of '@JsonFormat(with=JsonFormat.Feature\n      .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class\n   + Abstract class included as part of known type ids for\n      error message   when using JsonSubTypes\n   + Distinguish null from empty string for UUID\n      deserialization\n   + 'ReferenceType' does not expose valid containedType\n   + Add 'CoercionConfig[s]' mechanism for configuring\n      allowed coercions\n   + 'JsonProperty.Access.READ_ONLY' does not work with\n      'getter-as-setter' 'Collection's\n   + Support 'BigInteger' and 'BigDecimal' creators in\n      'StdValueInstantiator'\n   + 'JsonProperty.Access.READ_ONLY' fails with collections\n      when a property name is specified\n   + 'BigDecimal' precision not retained for polymorphic\n      deserialization\n   + Support use of 'Void' valued properties\n      ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES')\n   + Explicitly fail (de)serialization of 'java.time.*'\n      types in absence of registered custom (de)serializers\n   + Improve description included in by\n      'DeserializationContext.handleUnexpectedToken()'\n   + Support for JDK 14 record types ('java.lang.Record')\n   + 'PropertyNamingStrategy' class initialization depends\n      on its subclass, this can lead to class loading deadlock\n   + 'FAIL_ON_IGNORED_PROPERTIES' does not throw on\n      'READONLY' properties with an explicit name\n   + Add Gradle Module Metadata for version alignment with\n      Gradle 6\n   + Allow 'JsonNode' auto-convert into 'ArrayNode' if\n      duplicates found (for XML)\n   + Allow values of 'untyped' auto-convert into 'List' if\n      duplicates found (for XML)\n   + Add 'ValueInstantiator.createContextual(...)\n   + Support multiple names in 'JsonSubType.Type'\n   + Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic\n      deserialization of Enums\n   + Explicitly fail (de)serialization of 'org.joda.time.*'\n      types in absence of registered custom (de)serializers\n   + Trailing zeros are stripped when deserializing\n      BigDecimal values inside a @JsonUnwrapped property\n   + Extract getter/setter/field name mangling from\n      'BeanUtil' into pluggable 'AccessorNamingStrategy'\n   + Throw 'InvalidFormatException' instead of\n      'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion\n      failures\n   + Add '@JsonKey' annotation (similar to '@JsonValue') for\n      customizable serialization of Map keys\n   + 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should\n      work for enum as keys\n   + Add support for disabling special handling of 'Creator\n      properties' wrt alphabetic property ordering\n   + Add 'JsonNode.canConvertToExactIntegral()' to indicate\n      whether floating-point/BigDecimal values could be converted to\n      integers losslessly\n   + Improve static factory method generic type resolution\n      logic\n   + Allow preventing 'Enum from integer' coercion using new\n      'CoercionConfig' system\n   + '@JsonValue' not considered when evaluating inclusion\n   + Make some java platform modules optional\n   + Add support for serializing 'java.sql.Blob'\n   + 'AnnotatedCreatorCollector' should avoid processing\n      synthetic static (factory) methods\n   + Add errorprone static analysis profile to detect bugs at build time\n   + Problem with implicit creator name detection for constructor detection\n   + Add 'BeanDeserializerBase.isCaseInsensitive()'\n   + Refactoring of 'CollectionDeserializer' to solve CSV array handling issues\n   + Full 'LICENSE' included in jar for easier access by compliancy tools\n   + Fix type resolution for static methods (regression in 2.11.3)\n   + '@JsonCreator' on constructor not compatible with '@JsonIdentityInfo', \n     'PropertyGenerator'\n   + Add debug improvements about 'ClassUtil.getClassMethods()'\n   + Cannot detect creator arguments of mixins for JDK types\n   + Add 'JsonFormat.Shape' awareness for UUID serialization ('UUIDSerializer')\n   + Json serialization fails or a specific case that\n      contains generics and static methods with generic parameters\n      (2.11.1 -> 2.11.2 regression)\n   + 'ObjectMapper.activateDefaultTypingAsProperty()' is not\n      using parameter 'PolymorphicTypeValidator'\n   + Problem deserialization 'raw generic' fields\n      (like 'Map') in 2.11.2\n   + Fix issues with 'MapLikeType.isTrueMapType()',\n      'CollectionLikeType.isTrueCollectionType()'\n   + Parser/Generator features not set when using\n      'ObjectMapper.createParser()', 'createGenerator()'\n   + Polymorphic subtypes not registering on copied\n      ObjectMapper (2.11.1)\n   + Failure to read AnnotatedField value in Jackson 2.11\n   + 'TypeFactory.constructType()' does not take\n      'TypeBindings' correctly\n   + Builder Deserialization with JsonCreator Value vs Array\n   + JsonCreator on static method in Enum and Enum used as\n      key in map fails randomly\n   + 'StdSubtypeResolver' is not thread safe (possibly due\n      to copy not being made with 'ObjectMapper.copy()')\n   + 'Conflicting setter definitions for property' exception\n      for 'Map' subtype during deserialization\n   + Fail to deserialize local Records\n   + Rearranging of props when property-based generator is\n      in use leads to incorrect output\n   + Jackson doesn't respect\n      'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer\n      properties\n   + 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'\n      don't support 'Map' type field\n   + JsonParser from MismatchedInputException cannot\n      getText() for floating-point value\n   + i-I case conversion problem in Turkish locale with\n      case-insensitive deserialization\n   + '@JsonInject' fails on trying to find deserializer even\n      if inject-only\n   + Polymorphic deserialization should handle\n      case-insensitive Type Id property name if\n      'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled\n   + TreeTraversingParser and UTF8StreamJsonParser create\n      contexts differently\n   + Support use of '@JsonAlias' for enum values\n   + 'declaringClass' of 'enum-as-POJO' not removed for\n      'ObjectMapper' with a naming strategy\n   + Fix 'JavaType.isEnumType()' to support sub-classes\n   + BeanDeserializerBuilder Protected Factory Method for Extension\n   + Support '@JsonSerialize(keyUsing)' and\n      '@JsonDeserialize(keyUsing)' on Key class\n   + Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL'\n   + 'ObjectMapper.registerSubtypes(NamedType...)' doesn't\n      allow registering same POJO for two different type ids\n   + 'DeserializationContext.handleMissingInstantiator()'\n      throws 'MismatchedInputException' for non-static inner classes\n   + Incorrect 'JsonStreamContext' for 'TokenBuffer' and\n      'TreeTraversingParser'\n   + Add 'AnnotationIntrospector.findRenameByField()' to\n      support Kotlin's 'is-getter' naming convention\n   + Use '@JsonProperty(index)' for sorting properties on\n      serialization\n   + Java 8 'Optional' not working with '@JsonUnwrapped' on\n      unwrappable type\n   + Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES'\n      to allow blocking use of unsafe base type for polymorphic\n      deserialization\n   + 'ObjectMapper.setSerializationInclusion()' is ignored\n      for 'JsonAnyGetter'\n   + 'ValueInstantiationException' when deserializing using\n      a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS'\n   + JsonIgnoreProperties(ignoreUnknown = true) does not\n      work on field and method level\n   + Failure to resolve generic type parameters on\n      serialization\n   + JsonParser cannot getText() for input stream on\n      MismatchedInputException\n   + ObjectReader readValue lacks Class<T> argument\n   + Change default textual serialization of\n      'java.util.Date'/'Calendar' to include colon in timezone\n      offset\n   + Add 'ObjectMapper.createParser()' and 'createGenerator()' methods\n   + Allow serialization of 'Properties' with non-String values\n   + Add new factory method for creating custom 'EnumValues'\n      to pass to 'EnumDeserializer\n   + 'IllegalArgumentException' thrown for mismatched\n      subclass deserialization\n   + Add convenience methods for creating 'List', 'Map'\n      valued 'ObjectReader's (ObjectMapper.readerForListOf())\n   + 'SerializerProvider.findContentValueSerializer()' methods\n    \njackson-dataformats-binary - update from version 2.10.1 to version 2.13.0:\n    \n   + (cbor) Should validate UTF-8 multi-byte validity for short decode path too\n   + (ion) Deprecate 'CloseSafeUTF8Writer', remove use\n   + (smile) Make 'SmileFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'\n   + (cbor) Make 'CBORFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'\n   + (cbor) Handle case of BigDecimal with Integer.MIN_VALUE for scale gracefully\n   + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (cbor) Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (smile) Add 'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient\n     handling of broken Unicode surrogate pairs on writing\n   + (avro) Add 'logicalType' support for some 'java.time' types; add 'AvroJavaTimeModule'\n     for native ser/deser\n   + Support base64 strings in 'getBinaryValue()' for CBOR and Smile\n   + (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name\n   + (avro) Generate logicalType switch\n   + (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name\n   + (ion) 'jackson-dataformat-ion' does not handle\n      null.struct deserialization correctly\n   + 'Ion-java' dep 1.4.0 -> 1.8.0\n   + Minor change to Ion module registration names (fully-qualified)\n   + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (cbor) Uncaught exception in CBORParser._findDecodedFromSymbols() (by ossfuzzer)\n   + (smile) Uncaught validation problem wrt Smile 'BigDecimal' type\n   + (smile) ArrayIndexOutOfBoundsException for malformed Smile header\n   + (cbor) Failed to handle case of alleged String with length of Integer.MAX_VALUE\n   + (smile) Allocate byte[] lazily for longer Smile binary data payloads\n   + (cbor) CBORParser need to validate zero-length byte[] for BigInteger\n   + (smile) Handle invalid chunked-binary-format length gracefully\n   + (smile) Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded)\n   + (smile)  ArrayIndexOutOfBoundsException in SmileParser._decodeShortUnicodeValue()\n   + (smile) Handle sequence of Smile header markers without recursion\n   + (cbor) CBOR loses 'Map' entries with specific 'long' Map key values (32-bit boundary)\n   + (ion) Ion Polymorphic deserialization in 2.12 breaks wrt use of Native Type Ids \n     when upgrading from 2.8\n   + (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser' for invalid UTF-8 String\n   + (cbor) Handle invalid CBOR content like '[0x84]' (incomplete array)\n   + (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in 'EnumAsIonSymbolSerializer'\n   + (ion) Add support for generating IonSexps\n   + (ion) Add support for deserializing IonTimestamps and IonBlobs\n   + (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /\n      '.builderforTextualWriters()' convenience methods\n   + (ion) Enabling pretty-printing fails Ion serialization\n   + (ion) Allow disabling native type ids in IonMapper\n   + (smile) Small bug in byte-alignment for long field names\n      in Smile, symbol table reuse\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (ion) Optimize 'IonParser.getNumberType()' using\n      'IonReader.getIntegerSize()'\n   + (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'\n      for lenient handling of Unicode surrogate pairs on writing\n   + (cbor) Add support for decoding unassigned 'simple\n      values' (type 7)\n   + Add Gradle Module Metadata\n      (https://blog.gradle.org/alignment-with-gradle-module-metadata)\n   + (avro) Cache record names to avoid hitting class loader\n   + (avro) Avro null deserialization\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to\n      support binary writes, fix 'java.util.UUID' representation\n   + (ion) Allow 'IonObjectMapper' with class name annotation\n      introspector to deserialize generic subtypes\n   + Remove dependencies upon Jackson 1.X and Avro's\n      JacksonUtils\n   + 'jackson-databind' should not be full dependency for\n      (cbor, protobuf, smile) modules\n   + 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not\n      write most compact form for all integers\n   + 'AvroGenerator' overrides 'getOutputContext()' properly\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (avro) Fix schema evolution involving maps of non-scalar\n   + (protobuf) Parsing a protobuf message doesn't properly skip unknown fields\n   + (ion) IonObjectMapper close()s the provided IonWriter unnecessarily\n   + ion-java dependency 1.4.0 -> 1.5.1  \n  ","affected":[{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Manager Proxy 4.1","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Manager%20Proxy%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Manager Proxy 4.1","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Manager%20Proxy%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Manager Proxy 4.1","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Manager%20Proxy%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Manager Proxy 4.1","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Manager%20Proxy%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Manager Retail Branch Server 4.1","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Manager Retail Branch Server 4.1","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Manager Retail Branch Server 4.1","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Manager Retail Branch Server 4.1","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Manager Server 4.1","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Manager%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Manager Server 4.1","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Manager%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Manager Server 4.1","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Manager%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Manager Server 4.1","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Manager%20Server%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"SUSE:Enterprise Storage 7","purl":"pkg:rpm/suse/jackson-annotations&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"SUSE:Enterprise Storage 7","purl":"pkg:rpm/suse/jackson-core&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"SUSE:Enterprise Storage 7","purl":"pkg:rpm/suse/jackson-databind&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"SUSE:Enterprise Storage 7","purl":"pkg:rpm/suse/jackson-dataformats-binary&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-core":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/jackson-annotations&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-bom","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/jackson-bom&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/jackson-core&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/jackson-databind&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/jackson-dataformats-binary&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-annotations","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/jackson-annotations&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-bom","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/jackson-bom&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-core","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/jackson-core&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-databind","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/jackson-databind&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}},{"package":{"name":"jackson-dataformats-binary","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/jackson-dataformats-binary&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"ecosystem_specific":{"binaries":[{"jackson-annotations":"2.13.0-150200.3.6.1","jackson-annotations-javadoc":"2.13.0-150200.3.6.1","jackson-bom":"2.13.0-150200.3.3.1","jackson-core":"2.13.0-150200.3.6.1","jackson-core-javadoc":"2.13.0-150200.3.6.1","jackson-databind":"2.13.0-150200.3.9.1","jackson-databind-javadoc":"2.13.0-150200.3.9.1","jackson-dataformat-cbor":"2.13.0-150200.3.3.3","jackson-dataformat-smile":"2.13.0-150200.3.3.3","jackson-dataformats-binary":"2.13.0-150200.3.3.3","jackson-dataformats-binary-javadoc":"2.13.0-150200.3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:1678-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221678-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177616"},{"type":"REPORT","url":"https://bugzilla.suse.com/1182481"},{"type":"REPORT","url":"https://bugzilla.suse.com/1197132"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25649"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-28491"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-36518"}]}