[java-sig-commits] [Bug 1671099] New: CVE-2018-12023 jackson-databind: polymorphic deserialization of types from Oracle JDBC driver [fedora-all]