Medium ELSA-2020-4807 1 CVE

Moderate: prometheus-jmx-exporter security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[0.12.0-6]
- Fix CVE-2017-18640 by using updated snakeyaml.

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	prometheus-jmx-exporter	0:0.12.0-6.el8

Vulnerabilities 1

High 7.5

CVE-2017-18640 EPSS 27%

SnakeYAML Entity Expansion during load operation

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

org.yaml:snakeyaml snakeyaml snakeyaml Debian Ubuntu Maven

Dec 12, 2019