Lucene search

K
osvGoogleOSV:RLSA-2019:2720
HistorySep 10, 2019 - 3:32 p.m.

Important: pki-deps:10.6 security update

2019-09-1015:32:49
Google
osv.dev
8

7.5 High

AI Score

Confidence

High

0.533 Medium

EPSS

Percentile

97.6%

The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.