A new Debian Linux update has been published: DLA 2406-1: jackson-databind security update
A jackson-databind security update has been released for Debian GNU/Linux 9 LTS to address an external entity expansion vulnerability in jackson-databind.Read more @ Linux Compatible