9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.022 Low
EPSS
Percentile
89.2%
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.
Security Fix(es):
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)
jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)
jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.
bugzilla.redhat.com/show_bug.cgi?id=1535313
bugzilla.redhat.com/show_bug.cgi?id=1655438
bugzilla.redhat.com/show_bug.cgi?id=1656786
bugzilla.redhat.com/show_bug.cgi?id=1698084
bugzilla.redhat.com/show_bug.cgi?id=1744095
bugzilla.redhat.com/show_bug.cgi?id=1755831
bugzilla.redhat.com/show_bug.cgi?id=1755849
bugzilla.redhat.com/show_bug.cgi?id=1758187
bugzilla.redhat.com/show_bug.cgi?id=1758191
bugzilla.redhat.com/show_bug.cgi?id=1767125
bugzilla.redhat.com/show_bug.cgi?id=1767131
bugzilla.redhat.com/show_bug.cgi?id=1775293
bugzilla.redhat.com/show_bug.cgi?id=1777032
bugzilla.redhat.com/show_bug.cgi?id=1782486
bugzilla.redhat.com/show_bug.cgi?id=1795215
bugzilla.redhat.com/show_bug.cgi?id=1802006
bugzilla.redhat.com/show_bug.cgi?id=1806840
bugzilla.redhat.com/show_bug.cgi?id=1807371
bugzilla.redhat.com/show_bug.cgi?id=1807421
bugzilla.redhat.com/show_bug.cgi?id=1809210
errata.rockylinux.org/RLSA-2020:1644
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.022 Low
EPSS
Percentile
89.2%