Red Hat Security AdvisoryRHSA-2019:2720
pki-deps:10.6 security update
Released 2019-09-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) apache-commons-collections-3.2.2-10.module+el8.0.0+3892+c903d3f0.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.0.0+3892+c903d3f0.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.0.0+3892+c903d3f0.noarch::pki-deps:10.6 +47
Fixes 1 record
Priority MEDIUM 62
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.45205 · Published 2019-06-24 · Partial fix · 2.9.9.1, 2.8.11.4 +2 CWE-502
