Moderate Security Updates for Jackson Libraries Address Multiple Vulnerabilities

SUSE has released two moderate security updates addressing vulnerabilities in the Jackson libraries, specifically jackson-annotations, jackson-core, and jackson-databind. The updates fix three CVEs: CVE-2026-54515, CVE-2026-59889, and CVE-2026-59888, which could lead to unauthorized access and data manipulation. CVE-2026-54515 allows bypassing @JsonIgnoreProperties exclusions, while CVE-2026-59889 and CVE-2026-59888 involve issues with property deserialization and renaming. The updates are applicable to various SUSE products, including SUSE 15 SP7. The vulnerabilities were published between June 23 and July 14, 2026. Users are advised to audit Linux privileges to mitigate potential risks. The updates are available as of July 27, 2026.

Key Points: • SUSE released moderate updates for Jackson libraries addressing three CVEs. • CVE-2026-54515 could allow unauthorized access by bypassing @JsonIgnoreProperties. • Users are urged to audit Linux privileges to limit potential exploitation.