[java-sig-commits] [Bug 1671099] CVE-2018-12023 jackson-databind: polymorphic deserialization of types from Oracle JDBC driver [fedora-all]