Description
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | jackson-databind | 2.11.1-1 | — |
| Debian 13 | jackson-databind | 2.11.1-1 | — |
| Debian 12 | jackson-databind | 2.11.1-1 | — |
| Debian 8 | jackson-databind | 2.4.2-2+deb8u11 | DLA-2111-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | jackson-databind | No fix yet | — |
| Ubuntu 18.04 LTS | jackson-databind | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | jackson-databind | 2.4.2-3ubuntu0.1~esm2 | USN-4813-1 |
| Ubuntu Pro 14.04 LTS | jackson-databind | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | apache-commons-collections | 3.2.2-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | apache-commons-lang | 2.6-21.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | bea-stax +1 | 1.2.0-16.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | glassfish-jaxb +3 | 2.2.11-11.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | jackson-core +2 | 2.10.0-1.module+el8.2.0+5059+3eb3af25 | RHSA-2020:1644 |
| RHEL 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.1.0+3832+9784644d | RHSA-2020:1644 |
| RHEL 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | javassist +1 | 3.18.1-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | jss +1 | 4.6.2-4.module+el8.2.0+6123+b4678599 | RHSA-2020:1644 |
| RHEL 8 | ldapjdk +1 | 4.21.0-2.module+el8.2.0+4573+c3c38c7b | RHSA-2020:1644 |
| RHEL 8 | pki-ca +8 | 10.8.3-1.module+el8.2.0+5925+bad5981a | RHSA-2020:1644 |
| RHEL 8 | pki-servlet-engine +1 | 1:9.0.7-16.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | python-nss +2 | 1.0.1-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | relaxngDatatype | 2011.1-7.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | resteasy | 3.0.26-3.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | slf4j +1 | 1.7.25-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | stax-ex | 1.7.7-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | tomcatjss | 7.4.1-2.module+el8.2.0+4573+c3c38c7b | RHSA-2020:1644 |
| RHEL 8 | velocity | 1.7-24.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xalan-j2 | 2.7.1-38.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xerces-j2 | 2.11.0-34.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xml-commons-apis | 1.4.01-25.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xml-commons-resolver | 1.2-26.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xmlstreambuffer | 1.5.4-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
| RHEL 8 | xsom | 0-19.20110809svn.module+el8.1.0+3366+6dfb954c | RHSA-2020:1644 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | ansible-collection-redhat-satellite +1 | 1.3.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | ansible-runner +1 | 1.4.6-1.el7ar | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | ansiblerole-foreman_scap_client | 0.0.5-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | ansiblerole-insights-client | 1.7.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | ansiblerole-satellite-receptor-installer | 0.6.13-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | crane-selinux +1 | 3.4.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | createrepo_c +1 | 0.7.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | foreman +1 | 1.22.0.39-2.el7sat | RHSA-2020:4366, RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite Capsule 6 | foreman-bootloaders-redhat +1 | 202005201200-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image | 1:3.6.7-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image-service +1 | 1.0.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | foreman-installer +1 | 1:1.24.1.21-1.el7sat | RHSA-2020:4366, RHBA-2020:3255 |
| Red Hat Satellite Capsule 6 | foreman-proxy +1 | 2.1.2-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | future +1 | 0.16.0-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | gofer +2 | 2.12.5-7.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | hfsplus-tools | 332.14-12.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | katello +3 | 3.16.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | katello-certs-tools | 2.7.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | katello-client-bootstrap | 1.7.5-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | kobo | 0.5.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | libmodulemd | 1.7.0-1.pulp.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | libsolv +1 | 0.7.4-4.pulp.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | libwebsockets | 2.4.2-2.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | livecd-tools +1 | 1:20.4-1.6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | mod_xsendfile | 0.12-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | ostree | 2017.1-2.atomic.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp +14 | 2.21.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp-docker +3 | 3.2.7-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp-katello | 1.0.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp-ostree +3 | 1.3.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp-puppet +3 | 2.21.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pulp-rpm +4 | 2.21.0.6-1.el7sat | RHSA-2020:4366, RHBA-2020:3255 |
| Red Hat Satellite Capsule 6 | puppet-agent | 6.14.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | puppet-agent-oauth | 0.5.1-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | puppet-foreman_scap_client | 0.4.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | puppetlabs-stdlib | 4.25.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | puppetserver | 6.13.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pycairo | 1.16.3-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | pygobject3 +2 | 3.28.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-amqp +1 | 2.2.2-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-anyjson +1 | 0.3.3-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-apypie +1 | 0.2.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-billiard +1 | 1:3.5.0.3-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-blinker | 1.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-bson +2 | 3.2-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-celery +1 | 4.0.2-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-click +1 | 6.7-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-crane +1 | 3.3.1-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-daemon +1 | 2.1.2-7.el7at | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-django +1 | 1.11.29-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-flask +1 | 1:0.12.2-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-gnupg | 0.3.7-1.el7ui | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-isodate +1 | 0.5.4-12.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-itsdangerous +1 | 0.24-15.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-jinja2 +1 | 2.10-10.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-jmespath +1 | 0.9.0-6.el7_7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-kid | 0.9.6-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-kombu +1 | 10:4.0.2-13.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-lockfile +1 | 1:0.11.0-10.el7ar | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-markupsafe +1 | 0.23-21.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-mongoengine | 0.10.5-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-nectar | 1.6.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-oauth2 | 1.5.211-8.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-okaara +1 | 1.0.37-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-pexpect +1 | 4.6-1.el7at | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-psutil | 5.0.1-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-ptyprocess +1 | 0.5.2-3.el7at | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-pycurl +1 | 7.43.0.2-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-qpid | 1.35.0-5.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-semantic_version | 2.2.0-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-simplejson | 3.2.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-twisted +1 | 16.4.1-12.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-vine +1 | 10:1.1.3-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-werkzeug +1 | 0.12.2-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | python-zope-interface | 4.0.5-4.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | qpid-cpp +6 | 1.36.0-28.el7amq | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | qpid-dispatch +2 | 1.5.0-4.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | qpid-proton +2 | 0.28.0-3.el7 | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | redhat-access-insights-puppet | 1.0.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | repoview | 0.6.6-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | rubygem-fast_gettext | 1.1.0-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | rubygem-highline | 1.7.8-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | rubygem-newt | 0.9.6-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | rubygem-oauth | 0.5.4-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | saslwrapper +1 | 0.22-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | satellite +3 | 6.6.3-1.el7sat | RHSA-2020:4366, RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite Capsule 6 | satellite-installer | 6.8.0.11-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm +1 | 6.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-algebrick | 0.7.3-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-ansi | 1.5.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-apipie-params | 0.0.5-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-bundler_ext | 0.4.1-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-clamp | 1.1.2-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-concurrent-ruby | 1:1.1.6-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-concurrent-ruby-edge | 1:0.6.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-domain_name | 0.5.20160310-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-dynflow | 1.4.7-1.fm2_1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-faraday | 0.15.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-faraday_middleware | 0.13.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-ffi | 1.12.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-foreman-tasks-core | 0.3.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-foreman_ansible_core | 3.0.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-gssapi | 1.2.0-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-hashie | 3.6.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-highline | 1.7.8-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-http-cookie | 1.0.2-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-infoblox | 3.0.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-journald-logger | 2.0.4-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-journald-native | 1.0.11-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-jwt | 2.2.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-kafo | 4.1.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-kafo_parsers | 1.1.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-kafo_wizards | 0.0.1-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-little-plugger | 1.1.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-logging | 2.2.2-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-logging-journald | 2.0.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-mime-types | 3.2.2-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-mime-types-data | 3.2018.0812-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-multi_json | 1.14.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-multipart-post | 2.0.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-mustermann | 1.0.2-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-net-ssh | 4.2.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-net-ssh-krb | 0.4.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-netrc | 0.11.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-openscap | 0.4.9-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-powerbar | 2.0.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rack | 2.2.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rb-inotify | 0.9.7-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rest-client | 2.0.2-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rkerberos | 0.1.5-18.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rsec | 0.4.3-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-ruby-libvirt | 0.7.0-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-rubyipmi | 0.10.0-6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-sequel | 5.7.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-sinatra +1 | 2.0.3-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_ansible | 3.0.1-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_dhcp_infoblox | 0.0.16-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_dhcp_remote_isc | 0.0.5-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_discovery | 1.0.5-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_discovery_image | 1.2.1-1.fm2_1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_dns_infoblox | 1.0.0-7.fm2_1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_dynflow | 0.2.4-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_dynflow_core | 0.2.6-1.fm2_1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_openscap | 0.7.3-1.fm2_1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_pulp | 2.1.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-smart_proxy_remote_execution_ssh | 0.3.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-sqlite3 | 1.3.13-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-statsd-instrument | 2.1.4-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-tilt | 2.0.8-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-unf | 0.1.3-7.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-unf_ext | 0.0.7.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite Capsule 6 | tfm-rubygem-xmlrpc | 0.3.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | ansible-collection-redhat-satellite | 1.3.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | ansible-runner | 1.4.6-1.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | ansiblerole-foreman_scap_client | 0.0.5-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | ansiblerole-insights-client | 1.7.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | ansiblerole-satellite-receptor-installer | 0.6.13-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | candlepin +1 | 2.6.16-1.el7sat | RHSA-2020:4366, RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite 6 | crane-selinux +1 | 3.4.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | createrepo_c +1 | 0.7.4-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman +12 | 1.22.0.39-2.el7sat | RHSA-2020:4366, RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite 6 | foreman-bootloaders-redhat +1 | 202005201200-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman-discovery-image | 1:3.6.7-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman-discovery-image-service +1 | 1.0.0-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman-installer +1 | 1:1.24.1.21-1.el7sat | RHSA-2020:4366, RHBA-2020:3255 |
| Red Hat Satellite 6 | foreman-proxy +1 | 2.1.2-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman-selinux | 2.1.2.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | foreman-service +1 | 2.1.2.19-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | future | 0.16.0-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | gofer +2 | 2.12.5-7.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | hfsplus-tools | 332.14-12.el7 | RHSA-2020:4366 |
| Red Hat Satellite 6 | katello +3 | 3.16.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | katello-certs-tools | 2.7.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | katello-client-bootstrap | 1.7.5-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | keycloak-httpd-client-install | 1.2.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | kobo | 0.5.1-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | libmodulemd | 1.7.0-1.pulp.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | libsolv | 0.7.4-4.pulp.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | libwebsockets | 2.4.2-2.el7 | RHSA-2020:4366 |
| Red Hat Satellite 6 | livecd-tools +1 | 1:20.4-1.6.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | mod_passenger | 4.0.18-24.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | mod_xsendfile | 0.12-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | ostree | 2017.1-2.atomic.el7 | RHSA-2020:4366 |
| Red Hat Satellite 6 | pcp-mmvstatsd | 0.4-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp +4 | 2.21.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp-docker +2 | 3.2.7-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp-katello | 1.0.3-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp-ostree +2 | 1.3.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp-puppet +3 | 2.21.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pulp-rpm +4 | 2.21.0.6-1.el7sat | RHSA-2020:4366, RHBA-2020:3255 |
| Red Hat Satellite 6 | puppet-agent | 6.14.0-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | puppet-agent-oauth | 0.5.1-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | puppet-foreman_scap_client | 0.4.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | puppetlabs-stdlib | 4.25.1-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | puppetserver | 6.13.0-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pycairo | 1.16.3-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | pygobject3 | 3.28.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-aiohttp | 3.6.2-4.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-amqp | 2.2.2-5.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-anyjson | 0.3.3-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-apypie | 0.2.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-async-timeout | 3.0.1-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-attrs | 19.3.0-3.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-billiard | 1:3.5.0.3-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-blinker | 1.3-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-bson | 3.2-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-celery | 4.0.2-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-chardet | 3.0.4-10.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-click | 6.7-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-crane | 3.3.1-9.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-daemon | 2.1.2-7.el7at | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-dateutil | 2.8.1-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-django | 1.11.29-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-flask | 1:0.12.2-4.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-gnupg | 0.3.7-1.el7ui | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-idna | 2.4-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-idna-ssl | 1.1.0-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-isodate | 0.5.4-12.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-itsdangerous | 0.24-15.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-jinja2 | 2.10-10.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-jmespath | 0.9.0-6.el7_7 | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-kid | 0.9.6-11.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-kombu | 10:4.0.2-13.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-lockfile | 1:0.11.0-10.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-markupsafe | 0.23-21.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-mongoengine | 0.10.5-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-multidict | 4.7.4-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-nectar | 1.6.2-1.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-oauth2 | 1.5.211-8.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-okaara | 1.0.37-2.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-pexpect | 4.6-1.el7at | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-prometheus-client | 0.7.1-2.el7ar | RHSA-2020:4366 |
| Red Hat Satellite 6 | python-psutil | 5.0.1-3.el7sat | RHSA-2020:4366 |
| Red Hat Satellite 6 | satellite +4 | 6.6.3-1.el7sat | RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite 6 | tfm-rubygem-fog-ovirt | 1.2.3-1.el7sat | RHBA-2020:1494 |
| Red Hat Satellite 6 | tfm-rubygem-fog-vsphere | 3.2.1.1-1.el7sat | RHBA-2020:3255 |
| Red Hat Satellite 6 | tfm-rubygem-foreman-tasks | 0.17.5.6-1.el7sat | RHBA-2020:3255 |
| Red Hat Satellite 6 | tfm-rubygem-foreman_remote_execution +1 | 2.0.10.1-1.el7sat | RHBA-2020:3255 |
| Red Hat Satellite 6 | tfm-rubygem-foreman_rh_cloud | 0.9.4.1-2.el7sat | RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite 6 | tfm-rubygem-hammer_cli_foreman | 0.19.6.5-1.el7sat | RHBA-2020:3255 |
| Red Hat Satellite 6 | tfm-rubygem-katello | 3.12.0.41-1.el7sat | RHBA-2020:3255, RHBA-2020:1494 |
| Red Hat Satellite 6 | tfm-rubygem-runcible | 2.13.0-1.el7sat | RHBA-2020:1494 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-cxf +3 | 3.1.16-4.redhat_00003.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-databind | 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jettison | 1.3.8-2.redhat_00002.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-netty +1 | 4.1.63-1.Final_redhat_00002.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-resteasy +16 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-snakeyaml | 1.33.0-1.SP1_redhat_00001.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-velocity | 1.7.0-3.redhat_00006.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.9-2.GA_redhat_00002.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.9.0-4.redhat_00010.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.3.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-bouncycastle +3 | 1.60.0-2.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-codehaus-jackson +4 | 1.9.13-10.redhat_00007.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-cryptacular | 1.2.4-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-dom4j | 2.1.3-1.redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.2.5-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.5-13.SP3_redhat_00011.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.0.23-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.16-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-hibernate-validator +1 | 6.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-infinispan +8 | 9.4.18-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jackson-core +9 | 2.10.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jackson-databind | 2.9.10.4-1.redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jaegertracing-jaeger-client-java +2 | 0.34.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jakarta-el | 3.0.3-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jandex | 2.1.2-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jasypt | 1.9.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.31-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-genericjms | 2.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsf-api_2.3_spec | 2.3.5-7.SP2_redhat_00005.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jboss-logmanager | 2.1.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jboss-modules | 1.8.10-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.18-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting-jmx | 3.0.4-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +23 | 1.3.1-13.Final_redhat_00014.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration-eap7.3-server +6 | 1.7.1-5.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-vfs | 3.2.15-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-weld-3.1-api +2 | 3.1.0-6.SP2_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-jboss-xnio-base | 3.7.6-4.SP3_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-microprofile-config +1 | 1.4.0-1.redhat_00003.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-health | 2.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-metrics +1 | 2.3.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-opentracing +1 | 1.3.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-microprofile-rest-client +1 | 1.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-opensaml +13 | 3.3.1-1.redhat_00002.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketbox +1 | 5.0.3-7.Final_redhat_00006.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-picketlink-bindings +1 | 2.5.5-23.SP12_redhat_00012.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-resteasy +19 | 3.6.1-10.SP9_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-slf4j-jboss-logmanager | 1.0.4-1.GA_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-config | 1.6.2-3.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-health | 2.2.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-metrics | 2.4.0-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-smallrye-opentracing | 1.3.4-1.redhat_00004.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-snakeyaml | 1.24.0-2.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-stax2-api | 4.2.0-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-sun-istack-commons +2 | 3.0.10-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-txw2 +8 | 2.3.3-4.b02_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.0.30-3.SP3_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-weld-ejb +6 | 3.0.6-4.Final_redhat_00004.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-wildfly +2 | 7.2.9-4.GA_redhat_00003.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron | 1.6.8-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron-tool | 1.10.6-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.0.20-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk8 +1 | 7.2.9-4.GA_redhat_00003.1.el7eap | RHSA-2020:3638, RHSA-2020:2512 |
| Red Hat JBoss EAP 7 | eap7-wildfly-naming-client | 1.0.12-1.Final_redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wildfly-transaction-client | 1.1.11-1.Final_redhat_00001.1.el6eap | RHSA-2020:3639, RHSA-2020:3638, RHSA-2020:3637 |
| Red Hat JBoss EAP 7 | eap7-woodstox-core | 6.0.3-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
| Red Hat JBoss EAP 7 | eap7-wss4j +6 | 2.2.5-1.redhat_00001.1.el6eap | RHSA-2020:2513, RHSA-2020:2512, RHSA-2020:2511 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | apache-commons-collections | 3.2.2-10.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | apache-commons-lang | 2.6-21.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | bea-stax-api | 1.2.0-16.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | glassfish-fastinfoset | 1.2.13-9.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | glassfish-jaxb-api | 2.2.12-8.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | glassfish-jaxb-core +2 | 2.2.11-11.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | jackson-core +2 | 2.10.0-1.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | jakarta-commons-httpclient | 1:3.1-28.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | javassist +1 | 3.18.1-8.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | python3-nss +1 | 1.0.1-10.module_el8.5.0+2577+9e95fe00.alma | ALSA-2020:1644 |
| AlmaLinux 8 | relaxngDatatype | 2011.1-7.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | slf4j +1 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | stax-ex | 1.7.7-8.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | velocity | 1.7-24.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xalan-j2 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xerces-j2 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xml-commons-apis | 1.4.01-25.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xml-commons-resolver | 1.2-26.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xmlstreambuffer | 1.5.4-8.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
| AlmaLinux 8 | xsom | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 | ALSA-2020:1644 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | bea-stax | 1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | glassfish-jaxb | 2.2.11-11.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | javassist | 3.18.1-8.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | python-nss | 1.0.1-10.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | slf4j | 1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2020:1644 |
| Rocky Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | velocity | 1.7-24.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
| Rocky Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 | RLSA-2020:1644 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 6 repositories
-
jas502n/jackson-CVE-2020-8840 ★ 73 · Feb 21, 2020
FasterXML/jackson-databind 远程代码执行漏洞
-
fairyming/CVE-2020-8840 ★ 37 · Feb 24, 2020
CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞
-
Wfzsec/FastJson1.2.62-RCE ★ 16 · Feb 23, 2020
来源于jackson-CVE-2020-8840，需要开autotype
-
Veraxy00/CVE-2020-8840 ★ 4 · Nov 11, 2020
Jackson-databind远程代码执行漏洞（CVE-2020-8840）分析复现环境代码
-
dpredrag/CVE-2020-8840 ★ 1 · Jan 26, 2021
-
Blyth0He/CVE-2020-8840 ★ 1 · Jun 5, 2020
jackson jndi injection
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.fasterxml.jackson.core:jackson-databind | >= 2.0.0, < 2.6.7.4 | 2.6.7.4 | GHSA-4w82-r329-3q67 |
| Maven | com.fasterxml.jackson.core:jackson-databind | >= 2.7.0, < 2.7.9.7 | 2.7.9.7 | GHSA-4w82-r329-3q67 |
| Maven | com.fasterxml.jackson.core:jackson-databind | >= 2.8.0, < 2.8.11.5 | 2.8.11.5 | GHSA-4w82-r329-3q67 |
| Maven | com.fasterxml.jackson.core:jackson-databind | >= 2.9.0, < 2.9.10.3 | 2.9.10.3 | GHSA-4w82-r329-3q67 |
Advisories 18
- ALSA-2020:1644 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:1746 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2020:4366 Red Hat Security Advisory: Satellite 6.8 release Red Hat Security Advisories (RHSA) · Oct 13, 2026
- USN-4813-1 jackson-databind vulnerabilities Ubuntu Security Notices (USN) · Oct 12, 2026
- RHSA-2020:3639 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:3638 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:3637 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2512 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2513 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2511 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:1644 Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHBA-2020:3255 Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHBA-2020:1494 Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2022-2050 Red Hat JBoss Application Server (JBoss): Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- DLA-2111-1 jackson-databind - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2020:1644 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
References
- [druid-commits] 20200219 [GitHub] [druid] ccaominh opened a new pull request #9379: Suppress CVE-2020-8840 for htrace-core-4.0.1 mailing-list
- [druid-commits] 20200219 [GitHub] [druid] suneet-s commented on issue #9379: Suppress CVE-2020-8840 for htrace-core-4.0.1 mailing-list
- [debian-lts-announce] 20200220 [SECURITY] [DLA 2111-1] jackson-databind security update mailing-list
- [druid-commits] 20200221 [GitHub] [druid] ccaominh merged pull request #9379: Suppress CVE-2020-8840 for htrace-core-4.0.1 mailing-list
- [zookeeper-issues] 20200222 [jira] [Created] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-dev] 20200222 [jira] [Created] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-notifications] 20200223 [GitHub] [zookeeper] eolivelli opened a new pull request #1262: ZOOKEEPER-3734 upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-issues] 20200223 [jira] [Updated] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-issues] 20200223 [jira] [Assigned] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-notifications] 20200223 [GitHub] [zookeeper] phunt commented on issue #1262: ZOOKEEPER-3734 upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-commits] 20200223 [zookeeper] branch master updated: ZOOKEEPER-3734: upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-commits] 20200223 [zookeeper] branch branch-3.5 updated: ZOOKEEPER-3734: upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-issues] 20200223 [jira] [Resolved] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-notifications] 20200223 [GitHub] [zookeeper] asfgit closed pull request #1262: ZOOKEEPER-3734 upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-commits] 20200223 [zookeeper] branch branch-3.6 updated: ZOOKEEPER-3734: upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-commits] 20200224 [zookeeper] 01/02: ZOOKEEPER-3734: upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [zookeeper-issues] 20200225 [jira] [Updated] (ZOOKEEPER-3734) upgrade jackson-databind to address CVE-2020-8840 mailing-list
- [tomee-dev] 20200311 CVE-2020-8840 on TomEE 8.0.1 mailing-list
- [tomee-dev] 20200311 Re: CVE-2020-8840 on TomEE 8.0.1 mailing-list
- [tomee-dev] 20200313 Re: CVE-2020-8840 on TomEE 8.0.1 mailing-list
- [tomee-dev] 20200316 RE: CVE-2020-8840 on TomEE 8.0.1 mailing-list
- [ranger-dev] 20200330 [jira] [Updated] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200330 [jira] [Created] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200408 Re: Review Request 72332: RANGER-2770 : Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200408 Review Request 72332: RANGER-2770 : Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200415 [jira] [Commented] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200416 [jira] [Updated] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200416 Re: Review Request 72332: RANGER-2770 : Upgrade jackson-databind to version 2.9.10.4 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200417 [jira] [Updated] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200417 Re: Review Request 72332: RANGER-2770 : Upgrade jackson-databind to version 2.9.10.4 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200427 [jira] [Commented] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200427 [jira] [Resolved] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200430 Re: Review Request 72332: RANGER-2770 : Upgrade jackson-databind to version 2.9.10.4 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200507 [jira] [Commented] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [ranger-dev] 20200514 [jira] [Updated] (RANGER-2770) Upgrade jackson-databind to version 2.10.0 [CVE-2020-8840] - (Ranger) mailing-list
- [kafka-dev] 20200514 [jira] [Created] (KAFKA-9996) upgrade zookeeper to 3.5.8 to address security vulnerabilities mailing-list
- [kafka-jira] 20200514 [jira] [Created] (KAFKA-9996) upgrade zookeeper to 3.5.8 to address security vulnerabilities mailing-list
- https://www.oracle.com/security-alerts/cpuapr2020.html
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 image mailing-list
- [geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12 mailing-list
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://github.com/FasterXML/jackson-databind/issues/2620
- https://security.netapp.com/advisory/ntap-20200327-0002/
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fastjason-en