[ALSA-2019:2720] Important: pki-deps:10.6 security update
Type:
security
Severity:
important
Release date:
2019-09-10
Description:
The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by AlmaLinux Certificate System. Security Fix(es): * jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages:
  • xmlstreambuffer-1.5.4-8.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • jakarta-commons-httpclient-3.1-28.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • glassfish-jaxb-txw2-2.2.11-11.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • slf4j-1.7.25-4.module_el8.6.0+2752+f1f3449e.noarch.rpm
  • jackson-jaxrs-json-provider-2.9.9-1.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • relaxngDatatype-2011.1-7.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • apache-commons-collections-3.2.2-10.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • javassist-3.18.1-8.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • xml-commons-resolver-1.2-26.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • xerces-j2-2.11.0-34.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • velocity-1.7-24.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • xalan-j2-2.7.1-38.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • slf4j-jdk14-1.7.25-4.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • jackson-jaxrs-providers-2.9.9-1.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • bea-stax-api-1.2.0-16.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • xml-commons-apis-1.4.01-25.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • glassfish-jaxb-runtime-2.2.11-11.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • glassfish-fastinfoset-1.2.13-9.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • glassfish-jaxb-api-2.2.12-8.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • slf4j-1.7.25-4.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • apache-commons-lang-2.6-21.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • python3-nss-1.0.1-10.module_el8.5.0+2577+9e95fe00.alma.x86_64.rpm
  • javassist-javadoc-3.18.1-8.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • xsom-0-19.20110809svn.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • stax-ex-1.7.7-8.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • glassfish-jaxb-core-2.2.11-11.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • python-nss-doc-1.0.1-10.module_el8.5.0+2577+9e95fe00.alma.x86_64.rpm
  • jackson-module-jaxb-annotations-2.7.6-4.module_el8.5.0+2577+9e95fe00.noarch.rpm
  • python-nss-doc-1.0.1-10.module_el8.5.0+2577+9e95fe00.alma.aarch64.rpm
  • python3-nss-1.0.1-10.module_el8.5.0+2577+9e95fe00.alma.aarch64.rpm
  • python-nss-doc-1.0.1-10.module_el8.5.0+150+5f0dbea0.alma.ppc64le.rpm
  • glassfish-fastinfoset-1.2.13-9.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • javassist-3.18.1-8.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xalan-j2-2.7.1-38.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • python3-nss-1.0.1-10.module_el8.5.0+150+5f0dbea0.alma.ppc64le.rpm
  • velocity-1.7-24.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xerces-j2-2.11.0-34.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • bea-stax-api-1.2.0-16.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xml-commons-apis-1.4.01-25.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • apache-commons-lang-2.6-21.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • apache-commons-collections-3.2.2-10.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • relaxngDatatype-2011.1-7.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • glassfish-jaxb-core-2.2.11-11.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • slf4j-jdk14-1.7.25-4.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • jackson-module-jaxb-annotations-2.7.6-4.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • jackson-jaxrs-providers-2.9.9-1.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • stax-ex-1.7.7-8.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xmlstreambuffer-1.5.4-8.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xsom-0-19.20110809svn.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • glassfish-jaxb-runtime-2.2.11-11.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • xml-commons-resolver-1.2-26.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • jakarta-commons-httpclient-3.1-28.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • glassfish-jaxb-api-2.2.12-8.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • jackson-jaxrs-json-provider-2.9.9-1.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • glassfish-jaxb-txw2-2.2.11-11.module_el8.5.0+150+5f0dbea0.noarch.rpm
  • javassist-javadoc-3.18.1-8.module_el8.5.0+150+5f0dbea0.noarch.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.