# jackson-databind security updates

Patch Radar has 78 security fixes for jackson-databind, closing 65 CVEs, 2 of which are being exploited. The newest is ALAS2023-2026-3305 (2.21.7-1.amzn2023.0.1), released November 7, 2026.

- Web page: https://patchblox.com/security/product/linux/jackson-databind
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ALAS2023-2026-3305](https://patchblox.com/security/data/fix/linux/alas2023-2026-3305.md) | Nov 7, 2026 | amzn 2023 2.21.7-1.amzn2023.0.1 | High | 5 | 0 |
| [ELSA-2026-90909](https://patchblox.com/security/data/fix/linux/elsa-2026-90909.md) | Nov 7, 2026 | ol 8 0:2.21.4-1.module+el8.10.0+91095+797d7a50.1 | High | 3 | 0 |
| [ALSA-2026:90909](https://patchblox.com/security/data/fix/linux/alsa-2026-90909.md) | Nov 7, 2026 | almalinux 8 2.21.4-1.module_el8.10.0+4329+908ad137.1 | High | 3 | 0 |
| [RLSA-2026:90909](https://patchblox.com/security/data/fix/linux/rlsa-2026-90909.md) | Nov 7, 2026 | rocky 8 0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.1 | High | 3 | 0 |
| [RLSA-2026:80504](https://patchblox.com/security/data/fix/linux/rlsa-2026-80504.md) | Nov 7, 2026 | rocky 9 0:2.21.6-1.el9_8 | High | 1 | 0 |
| [RLSA-2026:85231](https://patchblox.com/security/data/fix/linux/rlsa-2026-85231.md) | Nov 7, 2026 | rocky 9 0:2.21.6-1.el9_8.1 | High | 1 | 0 |
| [RHSA-2026:90909](https://patchblox.com/security/data/fix/linux/rhsa-2026-90909.md) | Oct 29, 2026 | RHEL 8 0:2.21.4-1.module+el8.10.0+25128+a2644b4c.1 | High | 3 | 0 |
| [DEBIAN-CVE-2026-110879](https://patchblox.com/security/data/fix/linux/debian-cve-2026-110879.md) | Oct 28, 2026 | Debian 14 2.22.4-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-91776](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91776.md) | Oct 20, 2026 | Debian 14 2.18.11-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-91777](https://patchblox.com/security/data/fix/linux/debian-cve-2026-91777.md) | Oct 20, 2026 | Debian 14 2.18.11-1 | High | 1 | 0 |
| [SUSE-SU-2026:24149-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24149-1.md) | Oct 6, 2026 | sles 16.0 2.18.11-160000.1.1 | High | 10 | 0 |
| [OPENSUSE-SU-2026:22034-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22034-1.md) | Oct 6, 2026 | opensuse-leap 16.0 2.18.11-160000.1.1 | High | 10 | 0 |
| [SUSE-SU-2026:4394-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4394-1.md) | Sep 29, 2026 | sles 15.6 2.18.11-150200.3.36.1 | High | 12 | 0 |
| [SUSE-SU-2026:4394-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4394-1.md) | Sep 29, 2026 | sles 15.7 2.18.11-150200.3.36.1 | High | 12 | 0 |
| [DEBIAN-CVE-2026-68497](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68497.md) | Sep 11, 2026 | Debian 14 2.18.11-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-83557](https://patchblox.com/security/data/fix/linux/debian-cve-2026-83557.md) | Sep 1, 2026 | Debian 14 2.18.11-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-19032](https://patchblox.com/security/data/fix/linux/debian-cve-2026-19032.md) | Sep 1, 2026 | Debian 14 2.18.11-1 | Routine | 1 | 0 |
| [ALAS2023-2026-2081](https://patchblox.com/security/data/fix/linux/alas2023-2026-2081.md) | Aug 31, 2026 | amzn 2023 2.21.5-2.amzn2023.0.1 | Routine | 3 | 0 |
| [SUSE-SU-2026:3273-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3273-1.md) | Jul 27, 2026 | sles 15.7 2.18.9-150200.3.33.1 | Routine | 3 | 0 |
| [ELSA-2026-43218](https://patchblox.com/security/data/fix/linux/elsa-2026-43218.md) | Jul 23, 2026 | ol 8 0:2.21.4-1.module+el8.10.0+90972+fe199724 | High | 1 | 0 |
| [RHSA-2026:43218](https://patchblox.com/security/data/fix/linux/rhsa-2026-43218.md) | Jul 22, 2026 | RHEL 8 0:2.21.4-1.module+el8.10.0+24523+f75fb079 | High | 1 | 0 |
| [ALSA-2026:43218](https://patchblox.com/security/data/fix/linux/alsa-2026-43218.md) | Jul 22, 2026 | almalinux 8 2.21.4-1.module_el8.10.0+4235+0924958e | High | 1 | 0 |
| [ALAS2023-2026-1947](https://patchblox.com/security/data/fix/linux/alas2023-2026-1947.md) | Jul 20, 2026 | amzn 2023 2.16.1-4.amzn2023.0.2 | High | 4 | 0 |
| [ALAS2023-2026-1949](https://patchblox.com/security/data/fix/linux/alas2023-2026-1949.md) | Jul 20, 2026 | amzn 2023 2.14.2-1.amzn2023.0.1 | High | 1 | 0 |
| [SUSE-SU-2026:22822-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22822-1.md) | Jul 18, 2026 | sles 16.0 2.18.9-160000.1.1 | Routine | 3 | 0 |
| [OPENSUSE-SU-2026:21375-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21375-1.md) | Jul 18, 2026 | opensuse-leap 16.0 2.18.9-160000.1.1 | Routine | 3 | 0 |
| [RLSA-2026:40895](https://patchblox.com/security/data/fix/linux/rlsa-2026-40895.md) | Jul 17, 2026 | rocky 9 0:2.21.4-1.el9_8 | High | 2 | 0 |
| [DEBIAN-CVE-2026-50193](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50193.md) | Jul 10, 2026 | Debian 12.15 (bookworm) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-50193](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50193.md) | Jul 10, 2026 | Debian 13.5 (trixie) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-50193](https://patchblox.com/security/data/fix/linux/debian-cve-2026-50193.md) | Jul 10, 2026 | Debian 14 2.14.0-1 | High | 1 | 0 |
| [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 | sles 15.6 2.18.8-150200.3.28.2 | High | 4 | 0 |
| [SUSE-SU-2026:2801-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2801-1.md) | Jul 8, 2026 | sles 15.7 2.18.8-150200.3.28.2 | High | 4 | 0 |
| [OPENSUSE-SU-2026:21201-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21201-1.md) | Jul 1, 2026 | opensuse-leap 16.0 2.18.8-160000.1.1 | High | 3 | 0 |
| [SUSE-SU-2026:22504-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22504-1.md) | Jul 1, 2026 | sles 16.0 2.18.8-160000.1.1 | High | 3 | 0 |
| [DEBIAN-CVE-2026-54513](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54513.md) | Jun 23, 2026 | Debian 14 2.18.11-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54512](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54512.md) | Jun 23, 2026 | Debian 14 2.18.11-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-54515](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54515.md) | Jun 23, 2026 | Debian 14 2.18.11-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-54514](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54514.md) | Jun 23, 2026 | Debian 14 2.18.11-1 | Routine | 1 | 0 |
| [RLSA-2025:12280](https://patchblox.com/security/data/fix/linux/rlsa-2025-12280.md) | Oct 18, 2025 | rocky 9 0:2.19.1-1.el9_6 | High | 1 | 0 |
| [RLSA-2025:14126](https://patchblox.com/security/data/fix/linux/rlsa-2025-14126.md) | Sep 8, 2025 | rocky 8 0:2.19.1-1.module+el8.10.0+2052+1b0fb438 | High | 1 | 0 |
| [ELSA-2025-14126](https://patchblox.com/security/data/fix/linux/elsa-2025-14126.md) | Aug 22, 2025 | ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a | High | 1 | 0 |
| [ALSA-2025:14126](https://patchblox.com/security/data/fix/linux/alsa-2025-14126.md) | Aug 20, 2025 | almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 | High | 1 | 0 |
| [RHSA-2025:14126](https://patchblox.com/security/data/fix/linux/rhsa-2025-14126.md) | Aug 20, 2025 | RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b | High | 1 | 0 |
| [ALAS2023-2025-798](https://patchblox.com/security/data/fix/linux/alas2023-2025-798.md) | Jan 6, 2025 | amzn 2023 2.11.4-6.amzn2023.0.3 | High | 1 | 0 |
| [RLSA-2024:3061](https://patchblox.com/security/data/fix/linux/rlsa-2024-3061.md) | Jun 14, 2024 | rocky 8 0:2.14.2-1.module+el8.10.0+1763+c7c02164 | High | 1 | 0 |
| [ELSA-2024-3061](https://patchblox.com/security/data/fix/linux/elsa-2024-3061.md) | May 24, 2024 | ol 8 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 | High | 1 | 0 |
| [ALSA-2024:3061](https://patchblox.com/security/data/fix/linux/alsa-2024-3061.md) | May 22, 2024 | almalinux 8 2.14.2-1.module_el8.10.0+3791+e0637953 | High | 1 | 0 |
| [RHSA-2024:3061](https://patchblox.com/security/data/fix/linux/rhsa-2024-3061.md) | May 22, 2024 | RHEL 8 0:2.14.2-1.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [ALAS2023-2023-428](https://patchblox.com/security/data/fix/linux/alas2023-2023-428.md) | Oct 30, 2023 | amzn 2023 2.11.4-6.amzn2023.0.2 | High | 1 | 0 |
| [DEBIAN-CVE-2021-46877](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46877.md) | Mar 18, 2023 | Debian 12.15 (bookworm) 2.13.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-46877](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46877.md) | Mar 18, 2023 | Debian 13.5 (trixie) 2.13.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-46877](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46877.md) | Mar 18, 2023 | Debian 14 2.13.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-10650](https://patchblox.com/security/data/fix/linux/debian-cve-2020-10650.md) | Dec 26, 2022 | Debian 12.15 (bookworm) 2.11.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-10650](https://patchblox.com/security/data/fix/linux/debian-cve-2020-10650.md) | Dec 26, 2022 | Debian 13.5 (trixie) 2.11.1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-10650](https://patchblox.com/security/data/fix/linux/debian-cve-2020-10650.md) | Dec 26, 2022 | Debian 14 2.11.1-1 | High | 1 | 0 |
| [DSA-5283-1](https://patchblox.com/security/data/fix/linux/dsa-5283-1.md) | Nov 17, 2022 | Debian 11.6 (bullseye) 2.12.1-1+deb11u1 | High | 1 | 0 |
| [ELSA-2022-7470](https://patchblox.com/security/data/fix/linux/elsa-2022-7470.md) | Nov 15, 2022 | ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 | High | 1 | 0 |
| [RLSA-2022:7470](https://patchblox.com/security/data/fix/linux/rlsa-2022-7470.md) | Nov 8, 2022 | rocky 8 0:2.10.0-1.module+el8.3.0+53+ea062990 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42004](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42004.md) | Oct 2, 2022 | Debian 12.15 (bookworm) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42004](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42004.md) | Oct 2, 2022 | Debian 13.5 (trixie) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42004](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42004.md) | Oct 2, 2022 | Debian 14 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42003](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42003.md) | Oct 2, 2022 | Debian 12.15 (bookworm) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42003](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42003.md) | Oct 2, 2022 | Debian 13.5 (trixie) 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-42003](https://patchblox.com/security/data/fix/linux/debian-cve-2022-42003.md) | Oct 2, 2022 | Debian 14 2.14.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-36518](https://patchblox.com/security/data/fix/linux/debian-cve-2020-36518.md) | Mar 11, 2022 | Debian 12.15 (bookworm) 2.13.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-36518](https://patchblox.com/security/data/fix/linux/debian-cve-2020-36518.md) | Mar 11, 2022 | Debian 13.5 (trixie) 2.13.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2020-36518](https://patchblox.com/security/data/fix/linux/debian-cve-2020-36518.md) | Mar 11, 2022 | Debian 14 2.13.2.2-1 | High | 1 | 0 |
| [ELSA-2021-1775](https://patchblox.com/security/data/fix/linux/elsa-2021-1775.md) | May 25, 2021 | ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 | High | 1 | 0 |
| [RHSA-2021:1775](https://patchblox.com/security/data/fix/linux/rhsa-2021-1775.md) | May 18, 2021 | RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | High | 1 | 0 |
| [ELSA-2020-4847](https://patchblox.com/security/data/fix/linux/elsa-2020-4847.md) | Nov 10, 2020 | ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 | Patch now | 13 | 1 |
| [RHSA-2020:4847](https://patchblox.com/security/data/fix/linux/rhsa-2020-4847.md) | Nov 4, 2020 | RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | Patch now | 17 | 2 |
| [ELSA-2020-1644](https://patchblox.com/security/data/fix/linux/elsa-2020-1644.md) | May 5, 2020 | ol 8 0:2.10.0-1.module+el8.2.0+5508+146760da | High | 5 | 0 |
| [RHSA-2020:1644](https://patchblox.com/security/data/fix/linux/rhsa-2020-1644.md) | Apr 28, 2020 | RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 | High | 12 | 0 |
| [RHBA-2019:3416](https://patchblox.com/security/data/fix/linux/rhba-2019-3416.md) | Nov 5, 2019 | RHEL 8 0:2.9.9.2-1.module+el8.1.0+3832+9784644d | High | 2 | 0 |
| [ELSA-2019-2720](https://patchblox.com/security/data/fix/linux/elsa-2019-2720.md) | Sep 17, 2019 | ol 8 0:2.9.8-1.module+el8.0.0+5332+2d497d9a | High | 1 | 0 |
| [RHSA-2019:2720](https://patchblox.com/security/data/fix/linux/rhsa-2019-2720.md) | Sep 12, 2019 | RHEL 8 0:2.9.9.2-1.module+el8.0.0+3892+c903d3f0 | High | 1 | 0 |
| [ELSA-2019-1529](https://patchblox.com/security/data/fix/linux/elsa-2019-1529.md) | Jul 30, 2019 | ol 8 0:2.9.8-1.module+el8.0.0+5231+3e842911 | High | 4 | 0 |
| [RHSA-2019:1529](https://patchblox.com/security/data/fix/linux/rhsa-2019-1529.md) | Jun 18, 2019 | RHEL 8 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | High | 4 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo