USN-6177-1: Jettison vulnerabilities
19 June 2023
Several security issues were fixed in Jettison.
- libjettison-java - A Java library for converting XML to JSON and vice-versa
It was discovered that Jettison incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.