Lucene search

K
oraclelinuxOracleLinuxELSA-2019-1529
HistoryJul 30, 2019 - 12:00 a.m.

pki-deps:10.6 security update

2019-07-3000:00:00
linux.oracle.com
16

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

apache-commons-collections
[3.2.2-10]

  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    [3.2.2-9]
  • Remove workaround for symlink->directory rpm bug
    jackson-bom
    [2.9.8-1]
  • Update to latest upstream release
    [2.9.4-2]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
    [2.9.4-1]
  • Update to latest upstream release
    [2.9.3-1]
  • Initial packaging
    pki-servlet-container
    [1:9.0.7-14]
  • Update to JWS 5.0.2 distribution
  • Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
  • Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable ‘supportsCredentials’ for all origins
  • Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
  • Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet
    velocity
    [0:1.7-24]
  • Repack the tarball without binaries
    [0:1.7-23]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    xerces-j2
    [2.11.0-34]
  • Fix license tag to include W3C
    [2.11.0-33]
  • Add requirement on javapackages-tools since scripts use
    java-functions.
    [2.11.0-32]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
    xml-commons-resolver
    [0:1.2-26]
  • Add requirement on javapackages-tools since scripts use
    java-functions.
    [0:1.2-25]
  • Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P