RHBA-2020:1494 — Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update

Fixed packages 30

Release	Package	Fixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	foreman	0:1.22.0.39-2.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	foreman-debug	0:1.22.0.39-2.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	satellite	0:6.6.3-1.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	satellite-capsule	0:6.6.3-1.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	satellite-common	0:6.6.3-1.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.6::el7	satellite-debug-tools	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	candlepin	0:2.6.16-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	candlepin-selinux	0:2.6.16-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-cli	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-debug	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-ec2	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-gce	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-journald	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-libvirt	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-openstack	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-ovirt	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-postgresql	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-rackspace	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-telemetry	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	foreman-vmware	0:1.22.0.39-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	satellite	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	satellite-capsule	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	satellite-cli	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	satellite-common	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	satellite-debug-tools	0:6.6.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	tfm-rubygem-fog-ovirt	0:1.2.3-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	tfm-rubygem-foreman_rh_cloud	0:0.9.4.1-2.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	tfm-rubygem-katello	0:3.12.0.41-1.el7sat
Red Hat · Satellite 6 satellite:6.6::el7	tfm-rubygem-runcible	0:2.13.0-1.el7sat

Vulnerabilities 13

Critical 9.8

CVE-2019-20330

Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Jan 3, 2020
Critical 9.8

CVE-2020-8840 Public exploit EPSS 27%

Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven

Feb 10, 2020
Critical 9.8

CVE-2020-9546

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2020-9547 Public exploit Scanner template EPSS 18%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2020-9548 Public exploit Scanner template EPSS 19%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
High 8.8

CVE-2020-10968

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).

jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven

Mar 26, 2020
High 8.8

CVE-2020-10969

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 26, 2020
High 8.1

CVE-2020-11619

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Apr 7, 2020
High 8.1

CVE-2020-14060

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Jun 14, 2020
High 8.1

CVE-2020-14061

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms…

jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven

Jun 14, 2020
High 8.1

CVE-2020-14062

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Jun 14, 2020
High 8.1

CVE-2020-14195 Public exploit

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Jun 16, 2020
High 7.5

CVE-2019-12086 Public exploit EPSS 22%

Information exposure in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14…

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

May 17, 2019

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=1812592
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814424
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814425
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814426
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814427
report
https://bugzilla.redhat.com/show_bug.cgi?id=1814428
report
https://bugzilla.redhat.com/show_bug.cgi?id=1818940
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819911
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_1494.json
report
https://access.redhat.com/security/cve/CVE-2019-12086
report
https://bugzilla.redhat.com/show_bug.cgi?id=1713468
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12086
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12086
report
https://access.redhat.com/security/cve/CVE-2019-20330
report
https://bugzilla.redhat.com/show_bug.cgi?id=1793154
advisory
https://www.cve.org/CVERecord?id=CVE-2019-20330
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-20330
report
https://access.redhat.com/security/cve/CVE-2020-8840
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816330
advisory
https://www.cve.org/CVERecord?id=CVE-2020-8840
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-8840
report
https://access.redhat.com/security/cve/CVE-2020-9546
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816332
advisory
https://www.cve.org/CVERecord?id=CVE-2020-9546
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-9546
report
https://access.redhat.com/security/cve/CVE-2020-9547
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816337
advisory
https://www.cve.org/CVERecord?id=CVE-2020-9547
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-9547
report
https://access.redhat.com/security/cve/CVE-2020-9548
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816340
advisory
https://www.cve.org/CVERecord?id=CVE-2020-9548
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-9548
report
https://access.redhat.com/security/cve/CVE-2020-10968
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819208
advisory
https://www.cve.org/CVERecord?id=CVE-2020-10968
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-10968
report
https://access.redhat.com/security/cve/CVE-2020-10969
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819212

Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update

Fixed packages 30

Vulnerabilities 13

Deserialization of Untrusted Data in jackson-databind

Deserialization of Untrusted Data in jackson-databind

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

jackson-databind mishandles the interaction between serialization gadgets and typing

Deserialization of untrusted data in Jackson Databind

Deserialization of untrusted data in Jackson Databind

Deserialization of untrusted data in Jackson Databind

Deserialization of untrusted data in Jackson Databind

Information exposure in FasterXML jackson-databind

References