Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

2021-05-1806:04:17

errata.almalinux.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class (CVE-2020-1695)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchapache-commons-collections< 3.2.2-10.module_el8.3.0+2058+6bf11631apache-commons-collections-3.2.2-10.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchapache-commons-lang< 2.6-21.module_el8.3.0+2058+6bf11631apache-commons-lang-2.6-21.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchapache-commons-net< 3.6-3.module_el8.3.0+2058+6bf11631apache-commons-net-3.6-3.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchbea-stax-api< 1.2.0-16.module_el8.3.0+2058+6bf11631bea-stax-api-1.2.0-16.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchglassfish-fastinfoset< 1.2.13-9.module_el8.3.0+2058+6bf11631glassfish-fastinfoset-1.2.13-9.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchglassfish-jaxb-api< 2.2.12-8.module_el8.3.0+2058+6bf11631glassfish-jaxb-api-2.2.12-8.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchglassfish-jaxb-core< 2.2.11-11.module_el8.3.0+2058+6bf11631glassfish-jaxb-core-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchglassfish-jaxb-runtime< 2.2.11-11.module_el8.3.0+2058+6bf11631glassfish-jaxb-runtime-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchglassfish-jaxb-txw2< 2.2.11-11.module_el8.3.0+2058+6bf11631glassfish-jaxb-txw2-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux8noarchjackson-annotations< 2.10.0-1.module_el8.3.0+2058+6bf11631jackson-annotations-2.10.0-1.module_el8.3.0+2058+6bf11631.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	apache-commons-collections	< 3.2.2-10.module_el8.3.0+2058+6bf11631	apache-commons-collections-3.2.2-10.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	apache-commons-lang	< 2.6-21.module_el8.3.0+2058+6bf11631	apache-commons-lang-2.6-21.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	apache-commons-net	< 3.6-3.module_el8.3.0+2058+6bf11631	apache-commons-net-3.6-3.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	bea-stax-api	< 1.2.0-16.module_el8.3.0+2058+6bf11631	bea-stax-api-1.2.0-16.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	glassfish-fastinfoset	< 1.2.13-9.module_el8.3.0+2058+6bf11631	glassfish-fastinfoset-1.2.13-9.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	glassfish-jaxb-api	< 2.2.12-8.module_el8.3.0+2058+6bf11631	glassfish-jaxb-api-2.2.12-8.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	glassfish-jaxb-core	< 2.2.11-11.module_el8.3.0+2058+6bf11631	glassfish-jaxb-core-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	glassfish-jaxb-runtime	< 2.2.11-11.module_el8.3.0+2058+6bf11631	glassfish-jaxb-runtime-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	glassfish-jaxb-txw2	< 2.2.11-11.module_el8.3.0+2058+6bf11631	glassfish-jaxb-txw2-2.2.11-11.module_el8.3.0+2058+6bf11631.noarch.rpm
almalinux	8	noarch	jackson-annotations	< 2.10.0-1.module_el8.3.0+2058+6bf11631	jackson-annotations-2.10.0-1.module_el8.3.0+2058+6bf11631.noarch.rpm