Lucene search

RedHatRHSA-2020:1644

HistoryApr 28, 2020 - 9:00 a.m.

(RHSA-2020:1644) Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

2020-04-2809:00:20

access.redhat.com

0.03 Low

EPSS

Percentile

91.0%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)
jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)
jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchldapjdk-javadoc< 4.21.0-2.module+el8.2.0+4573+c3c38c7bldapjdk-javadoc-4.21.0-2.module+el8.2.0+4573+c3c38c7b.noarch.rpm
RedHatanyppc64lepython-nss-doc< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython-nss-doc-1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le.rpm
RedHatanynoarchpki-base-java< 10.8.3-1.module+el8.2.0+5925+bad5981apki-base-java-10.8.3-1.module+el8.2.0+5925+bad5981a.noarch.rpm
RedHatanys390xjss-debuginfo< 4.6.2-4.module+el8.2.0+6123+b4678599jss-debuginfo-4.6.2-4.module+el8.2.0+6123+b4678599.s390x.rpm
RedHatanynoarchjakarta-commons-httpclient< 3.1-28.module+el8.1.0+3366+6dfb954cjakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanyppc64lepython-nss-debugsource< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le.rpm
RedHatanynoarchstax-ex< 1.7.7-8.module+el8.1.0+3366+6dfb954cstax-ex-1.7.7-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchjackson-module-jaxb-annotations< 2.7.6-4.module+el8.1.0+3366+6dfb954cjackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchapache-commons-collections< 3.2.2-10.module+el8.1.0+3366+6dfb954capache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanyaarch64python-nss-debugsource< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	ldapjdk-javadoc	< 4.21.0-2.module+el8.2.0+4573+c3c38c7b	ldapjdk-javadoc-4.21.0-2.module+el8.2.0+4573+c3c38c7b.noarch.rpm
RedHat	any	ppc64le	python-nss-doc	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python-nss-doc-1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le.rpm
RedHat	any	noarch	pki-base-java	< 10.8.3-1.module+el8.2.0+5925+bad5981a	pki-base-java-10.8.3-1.module+el8.2.0+5925+bad5981a.noarch.rpm
RedHat	any	s390x	jss-debuginfo	< 4.6.2-4.module+el8.2.0+6123+b4678599	jss-debuginfo-4.6.2-4.module+el8.2.0+6123+b4678599.s390x.rpm
RedHat	any	noarch	jakarta-commons-httpclient	< 3.1-28.module+el8.1.0+3366+6dfb954c	jakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	ppc64le	python-nss-debugsource	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.ppc64le.rpm
RedHat	any	noarch	stax-ex	< 1.7.7-8.module+el8.1.0+3366+6dfb954c	stax-ex-1.7.7-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	jackson-module-jaxb-annotations	< 2.7.6-4.module+el8.1.0+3366+6dfb954c	jackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	apache-commons-collections	< 3.2.2-10.module+el8.1.0+3366+6dfb954c	apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	aarch64	python-nss-debugsource	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64.rpm

Rows per page:

1-10 of 961