(RHSA-2019:2720) Important: pki-deps:10.6 security update

2019-09-1015:32:49

access.redhat.com

0.533 Medium

EPSS

Percentile

97.6%

JSON

The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Red Hat Certificate System.

Security Fix(es):

jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchresteasy< 3.0.26-3.module+el8.0.0+3892+c903d3f0resteasy-3.0.26-3.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHatanynoarchglassfish-fastinfoset< 1.2.13-9.module+el8.0.0+3892+c903d3f0glassfish-fastinfoset-1.2.13-9.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHatanynoarchrelaxngdatatype< 2011.1-7.module+el8.0.0+3892+c903d3f0relaxngDatatype-2011.1-7.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHatanyppc64lepython3-nss< 1.0.1-10.module+el8.0.0+3892+c903d3f0python3-nss-1.0.1-10.module+el8.0.0+3892+c903d3f0.ppc64le.rpm
RedHatanyx86_64python3-nss< 1.0.1-10.module+el8.0.0+3892+c903d3f0python3-nss-1.0.1-10.module+el8.0.0+3892+c903d3f0.x86_64.rpm
RedHatanynoarchjavassist< 3.18.1-8.module+el8.0.0+3892+c903d3f0javassist-3.18.1-8.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHatanynoarchbea-stax-api< 1.2.0-16.module+el8.0.0+3892+c903d3f0bea-stax-api-1.2.0-16.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHatanyppc64lepython-nss-debugsource< 1.0.1-10.module+el8.0.0+3892+c903d3f0python-nss-debugsource-1.0.1-10.module+el8.0.0+3892+c903d3f0.ppc64le.rpm
RedHatanyaarch64python3-nss-debuginfo< 1.0.1-10.module+el8.0.0+3892+c903d3f0python3-nss-debuginfo-1.0.1-10.module+el8.0.0+3892+c903d3f0.aarch64.rpm
RedHatanys390xpython3-nss-debuginfo< 1.0.1-10.module+el8.0.0+3892+c903d3f0python3-nss-debuginfo-1.0.1-10.module+el8.0.0+3892+c903d3f0.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	resteasy	< 3.0.26-3.module+el8.0.0+3892+c903d3f0	resteasy-3.0.26-3.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHat	any	noarch	glassfish-fastinfoset	< 1.2.13-9.module+el8.0.0+3892+c903d3f0	glassfish-fastinfoset-1.2.13-9.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHat	any	noarch	relaxngdatatype	< 2011.1-7.module+el8.0.0+3892+c903d3f0	relaxngDatatype-2011.1-7.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHat	any	ppc64le	python3-nss	< 1.0.1-10.module+el8.0.0+3892+c903d3f0	python3-nss-1.0.1-10.module+el8.0.0+3892+c903d3f0.ppc64le.rpm
RedHat	any	x86_64	python3-nss	< 1.0.1-10.module+el8.0.0+3892+c903d3f0	python3-nss-1.0.1-10.module+el8.0.0+3892+c903d3f0.x86_64.rpm
RedHat	any	noarch	javassist	< 3.18.1-8.module+el8.0.0+3892+c903d3f0	javassist-3.18.1-8.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHat	any	noarch	bea-stax-api	< 1.2.0-16.module+el8.0.0+3892+c903d3f0	bea-stax-api-1.2.0-16.module+el8.0.0+3892+c903d3f0.noarch.rpm
RedHat	any	ppc64le	python-nss-debugsource	< 1.0.1-10.module+el8.0.0+3892+c903d3f0	python-nss-debugsource-1.0.1-10.module+el8.0.0+3892+c903d3f0.ppc64le.rpm
RedHat	any	aarch64	python3-nss-debuginfo	< 1.0.1-10.module+el8.0.0+3892+c903d3f0	python3-nss-debuginfo-1.0.1-10.module+el8.0.0+3892+c903d3f0.aarch64.rpm
RedHat	any	s390x	python3-nss-debuginfo	< 1.0.1-10.module+el8.0.0+3892+c903d3f0	python3-nss-debuginfo-1.0.1-10.module+el8.0.0+3892+c903d3f0.s390x.rpm