File _service:tar_scm:CVE-2020-10673.patch of Package jackson-databind

File _service:tar_scm:CVE-2020-10673.patch of Package jackson-databind (Revision 3503b0e734926cea1e5f151d368709a5)

Currently displaying revision 3503b0e734926cea1e5f151d368709a5 , Show latest

From 1645efbd392989cf015f459a91c999e59c921b15 Mon Sep 17 00:00:00 2001
From: Tatu Saloranta <tatu.saloranta@iki.fi>
Date: Tue, 17 Mar 2020 22:08:30 -0700
Subject: [PATCH] Fix #2660

---
 .../jackson/databind/jsontype/impl/SubTypeValidator.java      | 4 ++++
 1 files changed, 4 insertions(+)

diff --git a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
index 36e60d89f..387733f61 100644
--- a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
+++ b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
@@ -149,7 +149,11 @@ public class SubTypeValidator
 
         // [databind#2659]: aries.transaction.jms
         s.add("org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory");
+        s.add("org.apache.aries.transaction.jms.RecoverablePooledConnectionFactory");
 
+        // [databind#2660]: caucho-quercus
+        s.add("com.caucho.config.types.ResourceRef");
+        
         DEFAULT_NO_DESER_CLASS_NAMES = Collections.unmodifiableSet(s);
     }
 
-- 
2.23.0