(RHSA-2024:3061) Moderate: pki-core:10.6 and pki-deps:10.6 security update

2024-05-2206:35:29

access.redhat.com

rhsa-2024

pki-core

pki-deps

security update

jackson-databind

denial of service

cve-2020-36518

red hat certificate system

cvss score

enterprise linux 8.10

release notes

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchxalan-j2< 2.7.1-38.module+el8.10.0+20993+d0f024b0xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchjackson-bom< 2.14.2-1.module+el8.10.0+20993+d0f024b0jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchslf4j-jdk14< 1.7.25-4.module+el8.10.0+20993+d0f024b0slf4j-jdk14-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchxsom< 0-19.20110809svn.module+el8.10.0+20993+d0f024b0xsom-0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchidm-tomcatjss< 7.8.0-1.module+el8.10.0+21280+cce842b8idm-tomcatjss-7.8.0-1.module+el8.10.0+21280+cce842b8.noarch.rpm
RedHatanynoarchxml-commons-apis< 1.4.01-25.module+el8.10.0+20993+d0f024b0xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanyppc64leidm-pki-tools< 10.15.0-1.module+el8.10.0+21280+cce842b8idm-pki-tools-10.15.0-1.module+el8.10.0+21280+cce842b8.ppc64le.rpm
RedHatanynoarchjackson-core< 2.14.2-1.module+el8.10.0+20993+d0f024b0jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchjavassist-javadoc< 3.18.1-8.module+el8.10.0+20993+d0f024b0javassist-javadoc-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHatanynoarchjackson-databind< 2.14.2-1.module+el8.10.0+20993+d0f024b0jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	xalan-j2	< 2.7.1-38.module+el8.10.0+20993+d0f024b0	xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	jackson-bom	< 2.14.2-1.module+el8.10.0+20993+d0f024b0	jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	slf4j-jdk14	< 1.7.25-4.module+el8.10.0+20993+d0f024b0	slf4j-jdk14-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	xsom	< 0-19.20110809svn.module+el8.10.0+20993+d0f024b0	xsom-0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	idm-tomcatjss	< 7.8.0-1.module+el8.10.0+21280+cce842b8	idm-tomcatjss-7.8.0-1.module+el8.10.0+21280+cce842b8.noarch.rpm
RedHat	any	noarch	xml-commons-apis	< 1.4.01-25.module+el8.10.0+20993+d0f024b0	xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	ppc64le	idm-pki-tools	< 10.15.0-1.module+el8.10.0+21280+cce842b8	idm-pki-tools-10.15.0-1.module+el8.10.0+21280+cce842b8.ppc64le.rpm
RedHat	any	noarch	jackson-core	< 2.14.2-1.module+el8.10.0+20993+d0f024b0	jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	javassist-javadoc	< 3.18.1-8.module+el8.10.0+20993+d0f024b0	javassist-javadoc-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
RedHat	any	noarch	jackson-databind	< 2.14.2-1.module+el8.10.0+20993+d0f024b0	jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm