Summary
apache-commons-collections
apache-commons-lang
apache-commons-net
bea-stax
fasterxml-oss-parent
[49-1]
- Rebase to upstream version 49
[26-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[26-5]
- Fix license tag
[26-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[26-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
[26-2]
- Remove site-plugin from build
[26-1]
- update to 26
[24-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
[24-2]
- disable maven-enforcer-plugin support
[24-1]
- update to 24
[18e-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
[18e-1]
- update to 18e
[16-2]
- remove com.google.code.maven-replacer-plugin:replacer references
[16-1]
- update to 16
[11-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
[11-3]
- Rebuild to regenerate Maven auto-requires
[11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
[11-1]
- update to 11
[10-2]
- switch to XMvn
- minor changes to adapt to current guideline
[10-1]
- update to 10
[4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
[4-2]
- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local
[4-1]
- update to 4
[3-1]
- initial rpm
glassfish-fastinfoset
glassfish-jaxb-api
glassfish-jaxb
[2.2.11-12]
- Update requiremnts to avoid conflicts with jaxb module packages
jackson-annotations
[2.14.2-1]
- Rebase to upstream version 2.14.2
jackson-bom
[2.14.2-1]
- Rebase to upstream version 2.14.2
jackson-core
[2.14.2-1]
- Rebase to upstream version 2.14.2
jackson-databind
[2.14.2-1]
- Rebase to upstream version 2.14.2
jackson-jaxrs-providers
[2.14.2-1]
- Rebase to upstream version 2.14.2
jackson-modules-base
[2.14.2-2]
- Remove patch for java 11
[2.14.2-1]
- Rebase to upstream version 2.14.2
[2.14.1-1]
- Update to version 2.14.1
- Resolves: #2070122
[2.11.4-8]
- Drop jaxb-runtime dependency
[2.11.4-7]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
[2.11.4-6]
- Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc
[2.11.4-5]
- Add Obsoletes and Conflicts
[2.11.4-4]
- Rename subpackages to pki-jackson
[2.11.4-3]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
[2.11.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
[2.11.4-1]
- Update to version 2.11.4.
[2.11.3-1]
- Update to version 2.11.3.
[2.11.2-1]
- Update to version 2.11.2.
[2.11.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[2.11.1-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
[2.11.1-1]
- Update to version 2.11.1.
[2.11.0-1]
- Update to version 2.11.0.
[2.10.4-1]
- Update to version 2.10.4.
[2.10.3-1]
- Update to version 2.10.3.
[2.10.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
[2.10.2-1]
- Update to version 2.10.2.
[2.10.1-1]
- Update to version 2.10.1.
jackson-parent
[2.14-1]
- Rebase to upstream version 2.14
[2.10-1]
- Update to latest upstream release
[2.9.1.2-1]
- Update to latest upstream release
[2.9.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[2.9.1-1]
- Update to latest upstream release
[2.7-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[2.7-2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
[2.7-1.1]
- update to 2.7-1
[2.6.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
[2.6.2-1]
- update to 2.6.2
[2.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
[2.5-1]
- update to 2.5
[2.4.1-1]
- initial rpm
jakarta-commons-httpclient
javassist
pki-servlet-engine
[1:9.0.62-1]
- Bump version number to avoid conflicts with tomcat
[1:9.0.30-4]
- Convert pki-servlet-engine into an alias for tomcat
[1:9.0.30-3]
- Reverts: rhbz#1969366 as it causes other issues
[1:9.0.30-2]
- Resolves: rhbz#1969366 CA instance installation fails with error message
[1:9.0.30-1]
- Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
- Update to JWS 5.3.0 distribution
- Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)
[1:9.0.7-16]
- Obsoleted pki-servlet-container
[1:9.0.7-15]
- Rename pki-servlet-container into pki-servlet-engine
[1:9.0.7-14]
- Update to JWS 5.0.2 distribution
- Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
- Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet
[1:9.0.7-13]
- Reinstate Maven artifacts and fix maven-metadata JAR path
[1:9.0.7-12]
- Add missing BuildRequires: systemd-units
[1:9.0.7-11]
- Resolves: rhbz#1594139 Cleanup Provides and Requires
[1:9.0.7-10]
- Create packages for FreeIPA that wrap the JWS distribution of Tomcat
relaxngDatatype
slf4j
[0:1.7.25-4]
- Disallow EventData deserialization by default (CVE-2018-8088)
- Resolves rhbz#1549928
[0:1.7.25-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[0:1.7.25-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[0:1.7.25-1]
- Update to upstream version 1.7.25
[0:1.7.22-4]
- Avoid absolute paths
[0:1.7.22-3]
- Avoid literal carriage return
- Remove Group tag
[0:1.7.22-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
[0:1.7.22-1]
- Update to upstream version 1.7.22
[0:1.7.21-4]
- Install source JARs in separate package
[0:1.7.21-3]
- Re
Fixed packages 50
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | apache-commons-collections | 0:3.2.2-10.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | apache-commons-lang | 0:2.6-21.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | apache-commons-net | 0:3.6-3.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | bea-stax-api | 0:1.2.0-16.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | fasterxml-oss-parent | 0:49-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | glassfish-fastinfoset | 0:1.2.13-9.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | glassfish-jaxb-api | 0:2.2.12-8.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | glassfish-jaxb-core | 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | glassfish-jaxb-runtime | 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | glassfish-jaxb-txw2 | 0:2.2.11-12.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | idm-jss | 0:4.11.0-1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-jss-javadoc | 0:4.11.0-1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-ldapjdk | 0:4.24.0-1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-ldapjdk-javadoc | 0:4.24.0-1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-acme | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-base | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-base-java | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-ca | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-kra | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-server | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-symkey | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-pki-tools | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | idm-tomcatjss | 0:7.8.0-1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | jackson-annotations | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-bom | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-core | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-databind | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-jaxrs-json-provider | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-jaxrs-providers | 0:2.14.2-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-module-jaxb-annotations | 0:2.14.2-2.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-modules-base | 0:2.14.2-2.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jackson-parent | 0:2.14-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | javassist | 0:3.18.1-8.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | javassist-javadoc | 0:3.18.1-8.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | pki-servlet-engine | 1:9.0.62-1.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | python3-idm-pki | 0:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | relaxngDatatype | 0:2011.1-7.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | resteasy | 0:3.0.26-7.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | resteasy-javadoc | 0:3.0.26-7.module+el8.10.0+90282+4ef18d4b |
| Oracle Linux · 8 | slf4j | 0:1.7.25-4.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | slf4j-jdk14 | 0:1.7.25-4.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | stax-ex | 0:1.7.7-8.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | velocity | 0:1.7-24.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xalan-j2 | 0:2.7.1-38.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xerces-j2 | 0:2.11.0-34.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xml-commons-apis | 0:1.4.01-25.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xml-commons-resolver | 0:1.2-26.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xmlstreambuffer | 0:1.5.4-8.module+el8.10.0+90302+23fbc0c1 |
| Oracle Linux · 8 | xsom | 0:0-19.20110809svn.module+el8.10.0+90302+23fbc0c1 |
Vulnerabilities 1
-
High 7.5CVE-2020-36518 Public exploit
Deeply nested json in jackson-databind
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.