File _service:tar_scm:CVE-2020-11619.patch of Package jackson-databind

File _service:tar_scm:CVE-2020-11619.patch of Package jackson-databind (Revision 9529998259d5aaa2aadfdc21c7bd5809)

Currently displaying revision 9529998259d5aaa2aadfdc21c7bd5809 , Show latest

From 113e89fb08b1b6b072d60b3e4737ed407c13db9a Mon Sep 17 00:00:00 2001
From: Tatu Saloranta <tatu.saloranta@iki.fi>
Date: Mon, 6 Apr 2020 19:27:26 -0700
Subject: [PATCH] Fix #2680

---
 .../jackson/databind/jsontype/impl/SubTypeValidator.java       | 3 +++
 1 files changed, 3 insertions(+)

diff --git a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
index e3962ca72..80f5b61bd 100644
--- a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
+++ b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
@@ -49,6 +49,9 @@ public class SubTypeValidator
         // [databind#1737]; 3rd party
 //s.add("org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor"); // deprecated by [databind#1855]
         s.add("org.springframework.beans.factory.config.PropertyPathFactoryBean");
+        // [databind#2680]
+        s.add("org.springframework.aop.config.MethodLocatingFactoryBean");
+        s.add("org.springframework.beans.factory.config.BeanReferenceFactoryBean");
 
 // s.add("com.mchange.v2.c3p0.JndiRefForwardingDataSource"); // deprecated by [databind#1931]
 // s.add("com.mchange.v2.c3p0.WrapperConnectionPoolDataSource"); // - "" -
-- 
2.23.0