[java-sig-commits] [Bug 1538333] New: CVE-2018-5968 jackson-databind: unsafe deserialization due to incomplete blacklist ( incomplete fix for the CVE-2017-7525 and CVE-2017-17485) [fedora-all]