Packages / openSUSE Tumbleweed / Unspecified / jackson-databind

[Source: jackson-databind]

Package: jackson-databind (2.18.9-2.2)

Allgemeines Data-Binding-Paket für Jackson (2.x)

Die allgemeingültige Data-Binding-Funktionalität und das Tree-Model für den Jackson Data Processor. Es baut auf dem Core-Streaming-Parser/Generator-Paket auf und verwendet Jackson Annotations zur Konfiguration.

Other Packages Related to jackson-databind:

  • dep: java-headless (>= 1.8)

    Package not available

  • dep: [javapackages-filesystem]

    Dateisystemlayout für Java-Pakete

  • dep: mvn(com.fasterxml.jackson.core:jackson-annotations)

    Package not available

  • dep: mvn(com.fasterxml.jackson.core:jackson-core)

    Package not available

Download jackson-databind

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch1.5 MiB1.8 MiBlist of filesDownload

Paketdateipfade (9)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/share/doc/packages/jackson-databind
  • /usr/share/doc/packages/jackson-databind/CREDITS-2.x
  • /usr/share/doc/packages/jackson-databind/README.md
  • /usr/share/doc/packages/jackson-databind/VERSION-2.x
  • /usr/share/java/jackson-databind.jar
  • /usr/share/licenses/jackson-databind
  • /usr/share/licenses/jackson-databind/LICENSE
  • /usr/share/maven-metadata/jackson-databind.xml
  • /usr/share/maven-poms/jackson-databind.pom

Field source: openSUSE Tumbleweed OSS

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

openSUSE Tumbleweed im Browser testenImage mit jackson-databind bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.18.9-2.2tumbleweed / ossnoarchopenSUSE Tumbleweed · OSS · multi-architecture1.5 MiB1.8 MiBnoarch/jackson-databind-2.18.9-2.2.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-19032]

Published:

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from

Medium(5.3)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.11-1.1

    Version impact unknown

    pypi · jackson-databind · opensuse · tumbleweed

[CVE-2026-68497]

Published:

jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXM

High(7.5)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.11-160000.1.1

    Version impact unknown

    pypi · jackson-databind · opensuse · leap 16.0

[CVE-2026-59888]

Published:

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStra

Medium(6.5)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.9-2.1

    Version impact unknown

    pypi · jackson-databind · opensuse · tumbleweed

[CVE-2026-54512]

Published:

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValid

High(8.1)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.8-160000.1.1, 2.18.8-2.1

    Version impact unknown

    pypi · jackson-databind · opensuse · leap 16.0; pypi · jackson-databind · opensuse · tumbleweed

[CVE-2026-54513]

Published:

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.a

High(8.1)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.8-1.1

    Version impact unknown

    pypi · jackson-databind · opensuse · tumbleweed

[CVE-2026-54515]

Published:

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual

Medium(5.3)Unbekannt
Details (1)

  • 2.18.9-2.2 · noarch · tumbleweed

    Unbekannt · Behoben: 2.18.9-160000.1.1

    Version impact unknown

    pypi · jackson-databind · opensuse · leap 16.0

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.18.9-2.2 / noarchBeobachtet Sep 1, 2026sha512 65a6fbd65510…eeafbe16Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha512): 65a6fbd655101624e4267c062020f4974c8f07ab0623dba15692330bcc50e43ab4bba08e1340a2fecd221e795009e07d39c148b187ec4f462dcd0353eeafbe16

Field source: openSUSE Tumbleweed OSS

Quellen

  • openSUSE Tumbleweed OSSSep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable