Summary
apache-commons-collections
jss
[4.8.1-2]
- Bug 1932803 - HSM + FIPS: CMCRequest with a shared secret resulting in error
[4.8.1-1]
- Rebase to upstream JSS v4.8.1
- Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
- Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding
[4.8.0-2]
- Only check PKCS11Constants on beta builds
- Bump tomcatjss, pki-core conflicts due to lang3
[4.8.0-1]
- Rebase to upstream JSS v4.8.0
[4.8.0-0.1]
- Rebase to upstream JSS v4.8.0-b1
pki-core
[10.10.5-2.0.1]
- Remove upstream reference.
[10.10.5-2]
- Bug 1914396 - CVE-2021-20179 pki-core:10.6/pki-core: Unprivileged users can renew any certificate
[10.10.5-1]
- Rebase to PKI 10.10.5
- Bug 1929067 - PKI instance creation failed with new 389-ds-base build
pki-servlet-engine
[1:9.0.30-1]
- Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
- Update to JWS 5.3.0 distribution
- Remove new dependencies that PKI doesnt need (and are not provided by RHEL 8)
resteasy
[3.0.26-6]
- CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
Resolves: rh-bz#1845548
tomcatjss
[7.6.1-1]
- Rebase to TomcatJSS 7.6.1
[7.6.0-2]
- Bump dependency to JSS 4.8.0
- Remove unsupported platforms
[7.6.0-1]
- Rebase to TomcatJSS 7.6.0
Fixed packages 48
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | apache-commons-collections | 0:3.2.2-10.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | apache-commons-lang | 0:2.6-21.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | apache-commons-net | 0:3.6-3.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | bea-stax-api | 0:1.2.0-16.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | glassfish-fastinfoset | 0:1.2.13-9.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | glassfish-jaxb-api | 0:2.2.12-8.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | glassfish-jaxb-core | 0:2.2.11-11.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | glassfish-jaxb-runtime | 0:2.2.11-11.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | glassfish-jaxb-txw2 | 0:2.2.11-11.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-annotations | 0:2.10.0-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-core | 0:2.10.0-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-databind | 0:2.10.0-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-jaxrs-json-provider | 0:2.9.9-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-jaxrs-providers | 0:2.9.9-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jackson-module-jaxb-annotations | 0:2.7.6-4.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | javassist | 0:3.18.1-8.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | javassist-javadoc | 0:3.18.1-8.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | jss | 0:4.8.1-2.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | jss-javadoc | 0:4.8.1-2.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | ldapjdk | 0:4.22.0-1.module+el8.3.0+7857+983338ee |
| Oracle Linux · 8 | ldapjdk-javadoc | 0:4.22.0-1.module+el8.3.0+7857+983338ee |
| Oracle Linux · 8 | pki-acme | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-base | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-base-java | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-ca | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-kra | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-server | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-servlet-4.0-api | 1:9.0.30-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | pki-servlet-engine | 1:9.0.30-1.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | pki-symkey | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | pki-tools | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | python-nss-doc | 0:1.0.1-10.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | python3-nss | 0:1.0.1-10.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | python3-pki | 0:10.10.5-2.0.1.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | relaxngDatatype | 0:2011.1-7.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | resteasy | 0:3.0.26-6.module+el8.4.0+20041+bb8828ef |
| Oracle Linux · 8 | slf4j | 0:1.7.25-4.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | slf4j-jdk14 | 0:1.7.25-4.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | stax-ex | 0:1.7.7-8.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | tomcatjss | 0:7.6.1-1.module+el8.4.0+20053+7cddd5b6 |
| Oracle Linux · 8 | velocity | 0:1.7-24.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xalan-j2 | 0:2.7.1-38.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xerces-j2 | 0:2.11.0-34.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xml-commons-apis | 0:1.4.01-25.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xml-commons-resolver | 0:1.2-26.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xmlstreambuffer | 0:1.5.4-8.module+el8.3.0+7697+44932688 |
| Oracle Linux · 8 | xsom | 0:0-19.20110809svn.module+el8.3.0+7697+44932688 |
Vulnerabilities 1
-
High 7.5
Improper Input Validation in RESTEasy
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may res…