Skip to content
OpenAdvisories
Medium RLSA-2021:1775 1 CVE

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

Published May 18, 2021 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

* resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class (CVE-2020-1695)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Fixed packages 43

ReleasePackageFixed in
Rocky Linux · 8 apache-commons-collections 0:3.2.2-10.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-collections 0:3.2.2-10.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 apache-commons-lang 0:2.6-21.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-lang 0:2.6-21.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 apache-commons-net 0:3.6-3.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-net 0:3.6-3.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 bea-stax 0:1.2.0-16.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-fastinfoset 0:1.2.13-9.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-jaxb 0:2.2.11-11.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-jaxb-api 0:2.2.12-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-annotations 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-core 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-databind 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-jaxrs-providers 0:2.9.9-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-module-jaxb-annotations 0:2.7.6-4.module+el8.3.0+53+ea062990
Rocky Linux · 8 jakarta-commons-httpclient 1:3.1-28.module+el8.3.0+53+ea062990
Rocky Linux · 8 jakarta-commons-httpclient 1:3.1-28.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 javassist 0:3.18.1-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 javassist 0:3.18.1-8.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 jss 0:4.8.1-2.module+el8.4.0+418+b7ae1d4a
Rocky Linux · 8 ldapjdk 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
Rocky Linux · 8 pki-servlet-engine 1:9.0.30-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 python-nss 0:1.0.1-10.module+el8.3.0+53+ea062990
Rocky Linux · 8 relaxngDatatype 0:2011.1-7.module+el8.3.0+53+ea062990
Rocky Linux · 8 resteasy 0:3.0.26-6.module+el8.5.0+697+f586bb30
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.5.0+697+f586bb30
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.3.0+133+b8b54b58
Rocky Linux · 8 stax-ex 0:1.7.7-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 tomcatjss 0:7.6.1-1.module+el8.4.0+418+b7ae1d4a
Rocky Linux · 8 velocity 0:1.7-24.module+el8.3.0+53+ea062990
Rocky Linux · 8 velocity 0:1.7-24.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xalan-j2 0:2.7.1-38.module+el8.3.0+53+ea062990
Rocky Linux · 8 xalan-j2 0:2.7.1-38.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xerces-j2 0:2.11.0-34.module+el8.3.0+53+ea062990
Rocky Linux · 8 xerces-j2 0:2.11.0-34.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.5.0+697+f586bb30
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.3.0+53+ea062990
Rocky Linux · 8 xml-commons-resolver 0:1.2-26.module+el8.3.0+53+ea062990
Rocky Linux · 8 xml-commons-resolver 0:1.2-26.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xmlstreambuffer 0:1.5.4-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 xsom 0:0-19.20110809svn.module+el8.3.0+53+ea062990

Vulnerabilities 1

  • High 7.5
    CVE-2020-1695

    Improper Input Validation in RESTEasy

    A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may res…

    Red Hat RESTEasy resteasy resteasy3.0 Debian Ubuntu Maven

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1584550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1590942
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1664435
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1730462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1787115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843416
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1868233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1875563
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1883656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1883996
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1889691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1890639
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1891577
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1897120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1908541
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1912418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1912493
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1916686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1919282
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1929067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932803