Astra Linux – vulnerability in jackson-databind

FasterXML Jackson Databind 2.x prior to version 2.9.10.8 mishandles the interaction between serialization gadgets and typing, specifically related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...