Skip to content
OpenAdvisories
Medium ELSA-2024-3061 1 CVE

Moderate: pki-core:10.6 and pki-deps:10.6 security update (Oracle Linux 8)

Published May 24, 2024 · Updated May 24, 2024

Summary

apache-commons-collections
apache-commons-lang
apache-commons-net
bea-stax
fasterxml-oss-parent
[49-1]
- Rebase to upstream version 49

[26-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[26-5]
- Fix license tag

[26-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[26-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[26-2]
- Remove site-plugin from build

[26-1]
- update to 26

[24-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[24-2]
- disable maven-enforcer-plugin support

[24-1]
- update to 24

[18e-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[18e-1]
- update to 18e

[16-2]
- remove com.google.code.maven-replacer-plugin:replacer references

[16-1]
- update to 16

[11-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[11-3]
- Rebuild to regenerate Maven auto-requires

[11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[11-1]
- update to 11

[10-2]
- switch to XMvn
- minor changes to adapt to current guideline

[10-1]
- update to 10

[4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[4-2]
- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local

[4-1]
- update to 4

[3-1]
- initial rpm

glassfish-fastinfoset
glassfish-jaxb-api
glassfish-jaxb
[2.2.11-12]
- Update requiremnts to avoid conflicts with jaxb module packages

jackson-annotations
[2.14.2-1]
- Rebase to upstream version 2.14.2

jackson-bom
[2.14.2-1]
- Rebase to upstream version 2.14.2

jackson-core
[2.14.2-1]
- Rebase to upstream version 2.14.2

jackson-databind
[2.14.2-1]
- Rebase to upstream version 2.14.2

jackson-jaxrs-providers
[2.14.2-1]
- Rebase to upstream version 2.14.2

jackson-modules-base
[2.14.2-2]
- Remove patch for java 11

[2.14.2-1]
- Rebase to upstream version 2.14.2

[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122

[2.11.4-8]
- Drop jaxb-runtime dependency

[2.11.4-7]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[2.11.4-6]
- Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc

[2.11.4-5]
- Add Obsoletes and Conflicts

[2.11.4-4]
- Rename subpackages to pki-jackson

[2.11.4-3]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[2.11.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.11.4-1]
- Update to version 2.11.4.

[2.11.3-1]
- Update to version 2.11.3.

[2.11.2-1]
- Update to version 2.11.2.

[2.11.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.11.1-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.11.1-1]
- Update to version 2.11.1.

[2.11.0-1]
- Update to version 2.11.0.

[2.10.4-1]
- Update to version 2.10.4.

[2.10.3-1]
- Update to version 2.10.3.

[2.10.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.10.2-1]
- Update to version 2.10.2.

[2.10.1-1]
- Update to version 2.10.1.

jackson-parent
[2.14-1]
- Rebase to upstream version 2.14

[2.10-1]
- Update to latest upstream release

[2.9.1.2-1]
- Update to latest upstream release

[2.9.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.9.1-1]
- Update to latest upstream release

[2.7-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.7-2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.7-1.1]
- update to 2.7-1

[2.6.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6.2-1]
- update to 2.6.2

[2.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.5-1]
- update to 2.5

[2.4.1-1]
- initial rpm

jakarta-commons-httpclient
javassist
pki-servlet-engine
[1:9.0.62-1]
- Bump version number to avoid conflicts with tomcat

[1:9.0.30-4]
- Convert pki-servlet-engine into an alias for tomcat

[1:9.0.30-3]
- Reverts: rhbz#1969366 as it causes other issues

[1:9.0.30-2]
- Resolves: rhbz#1969366 CA instance installation fails with error message

[1:9.0.30-1]
- Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
- Update to JWS 5.3.0 distribution
- Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)

[1:9.0.7-16]
- Obsoleted pki-servlet-container

[1:9.0.7-15]
- Rename pki-servlet-container into pki-servlet-engine

[1:9.0.7-14]
- Update to JWS 5.0.2 distribution
- Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
- Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet

[1:9.0.7-13]
- Reinstate Maven artifacts and fix maven-metadata JAR path

[1:9.0.7-12]
- Add missing BuildRequires: systemd-units

[1:9.0.7-11]
- Resolves: rhbz#1594139 Cleanup Provides and Requires

[1:9.0.7-10]
- Create packages for FreeIPA that wrap the JWS distribution of Tomcat

relaxngDatatype
slf4j
[0:1.7.25-4]
- Disallow EventData deserialization by default (CVE-2018-8088)
- Resolves rhbz#1549928

[0:1.7.25-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.7.25-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.7.25-1]
- Update to upstream version 1.7.25

[0:1.7.22-4]
- Avoid absolute paths

[0:1.7.22-3]
- Avoid literal carriage return
- Remove Group tag

[0:1.7.22-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.7.22-1]
- Update to upstream version 1.7.22

[0:1.7.21-4]
- Install source JARs in separate package

[0:1.7.21-3]
- Re

Fixed packages 50

ReleasePackageFixed in
Oracle Linux · 8 apache-commons-collections 0:3.2.2-10.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 apache-commons-lang 0:2.6-21.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 apache-commons-net 0:3.6-3.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 bea-stax-api 0:1.2.0-16.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 fasterxml-oss-parent 0:49-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 glassfish-fastinfoset 0:1.2.13-9.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 glassfish-jaxb-api 0:2.2.12-8.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 glassfish-jaxb-core 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 glassfish-jaxb-runtime 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 glassfish-jaxb-txw2 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 idm-jss 0:4.11.0-1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-jss-javadoc 0:4.11.0-1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-ldapjdk 0:4.24.0-1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-ldapjdk-javadoc 0:4.24.0-1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-acme 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-base 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-base-java 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-ca 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-kra 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-server 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-symkey 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-pki-tools 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 idm-tomcatjss 0:7.8.0-1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 jackson-annotations 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-bom 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-core 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-databind 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-jaxrs-json-provider 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-jaxrs-providers 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-module-jaxb-annotations 0:2.14.2-2.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-modules-base 0:2.14.2-2.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jackson-parent 0:2.14-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 jakarta-commons-httpclient 1:3.1-28.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 javassist 0:3.18.1-8.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 javassist-javadoc 0:3.18.1-8.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 pki-servlet-engine 1:9.0.62-1.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 python3-idm-pki 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 relaxngDatatype 0:2011.1-7.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 resteasy 0:3.0.26-7.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 resteasy-javadoc 0:3.0.26-7.module+el8.10.0+90282+4ef18d4b
Oracle Linux · 8 slf4j 0:1.7.25-4.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 slf4j-jdk14 0:1.7.25-4.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 stax-ex 0:1.7.7-8.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 velocity 0:1.7-24.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xalan-j2 0:2.7.1-38.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xerces-j2 0:2.11.0-34.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xml-commons-resolver 0:1.2-26.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xmlstreambuffer 0:1.5.4-8.module+el8.10.0+90302+23fbc0c1
Oracle Linux · 8 xsom 0:0-19.20110809svn.module+el8.10.0+90302+23fbc0c1

Vulnerabilities 1