RHSA-2024:3061MediumCVSS 7.5

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update

Published
May 22, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-36518 →

📋 Description

CVE-2020-36518 — jackson-databind: denial of service via a large depth of nested objects

🎯 Affected products120

  • Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-collections-0:3.2.2-10.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-lang-0:2.6-21.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • apache-commons-net-0:3.6-3.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bea-stax-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bea-stax-api-0:1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • fasterxml-oss-parent-0:49-1.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • fasterxml-oss-parent-0:49-1.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-fastinfoset-0:1.2.13-9.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-api-0:2.2.12-8.module+el8.10.0+21035+a01f6469.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-core-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-runtime-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • glassfish-jaxb-txw2-0:2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch (pki-deps:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+21280+cce842b8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+21280+cce842b8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.aarch64 (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.ppc64le (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.s390x (pki-core:10.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +90 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (10)