From c9ef4a10d6f6633cf470d6a469514b68fa2be234 Mon Sep 17 00:00:00 2001

From: Tatu Saloranta <tatu.saloranta@iki.fi>

Date: Wed, 12 Jun 2019 22:20:12 -0700

Subject: [PATCH] Fix #2334

diff -uap jackson-databind-jackson-databind-2.7.6/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java.orig jackson-databind-jackson-databind-2.7.6/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java

--- jackson-databind-jackson-databind-2.7.6/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java.orig	2019-07-10 09:33:56.504230811 +0100

+++ jackson-databind-jackson-databind-2.7.6/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java	2019-07-10 09:37:41.094929667 +0100

@@ -72,6 +72,10 @@ public class SubTypeValidator

         s.add("org.apache.openjpa.ee.JNDIManagedRuntime");

         // CVE-2018-19362

         s.add("org.jboss.util.propertyeditor.DocumentEditor");

+

+        // [databind#2334] (2.9.9.1): logback-core

+        s.add("ch.qos.logback.core.db.DriverManagerConnectionSource");

+

         DEFAULT_NO_DESER_CLASS_NAMES = Collections.unmodifiableSet(s);

     }