RHSA-2020:4847
- Source
- https://access.redhat.com/errata/RHSA-2020:4847
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2020:4847.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2020:4847
- Related
- Published
- 2024-10-21T23:23:45Z
- Modified
- 2024-11-22T15:10:09Z
- Severity
-
- 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVSS Calculator
- Summary
- Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2020:4847
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
- https://bugzilla.redhat.com/show_bug.cgi?id=1376706
- https://bugzilla.redhat.com/show_bug.cgi?id=1399546
- https://bugzilla.redhat.com/show_bug.cgi?id=1406505
- https://bugzilla.redhat.com/show_bug.cgi?id=1601614
- https://bugzilla.redhat.com/show_bug.cgi?id=1601617
- https://bugzilla.redhat.com/show_bug.cgi?id=1666907
- https://bugzilla.redhat.com/show_bug.cgi?id=1668097
- https://bugzilla.redhat.com/show_bug.cgi?id=1686454
- https://bugzilla.redhat.com/show_bug.cgi?id=1695901
- https://bugzilla.redhat.com/show_bug.cgi?id=1701972
- https://bugzilla.redhat.com/show_bug.cgi?id=1706521
- https://bugzilla.redhat.com/show_bug.cgi?id=1710171
- https://bugzilla.redhat.com/show_bug.cgi?id=1721684
- https://bugzilla.redhat.com/show_bug.cgi?id=1724433
- https://bugzilla.redhat.com/show_bug.cgi?id=1732565
- https://bugzilla.redhat.com/show_bug.cgi?id=1732981
- https://bugzilla.redhat.com/show_bug.cgi?id=1777579
- https://bugzilla.redhat.com/show_bug.cgi?id=1805541
- https://bugzilla.redhat.com/show_bug.cgi?id=1817247
- https://bugzilla.redhat.com/show_bug.cgi?id=1821851
- https://bugzilla.redhat.com/show_bug.cgi?id=1822246
- https://bugzilla.redhat.com/show_bug.cgi?id=1824939
- https://bugzilla.redhat.com/show_bug.cgi?id=1824948
- https://bugzilla.redhat.com/show_bug.cgi?id=1825998
- https://bugzilla.redhat.com/show_bug.cgi?id=1828406
- https://bugzilla.redhat.com/show_bug.cgi?id=1842734
- https://bugzilla.redhat.com/show_bug.cgi?id=1842736
- https://bugzilla.redhat.com/show_bug.cgi?id=1843537
- https://bugzilla.redhat.com/show_bug.cgi?id=1845447
- https://bugzilla.redhat.com/show_bug.cgi?id=1850004
- https://bugzilla.redhat.com/show_bug.cgi?id=1854043
- https://bugzilla.redhat.com/show_bug.cgi?id=1854959
- https://bugzilla.redhat.com/show_bug.cgi?id=1855273
- https://bugzilla.redhat.com/show_bug.cgi?id=1855319
- https://bugzilla.redhat.com/show_bug.cgi?id=1856368
- https://bugzilla.redhat.com/show_bug.cgi?id=1857933
- https://bugzilla.redhat.com/show_bug.cgi?id=1861911
- https://bugzilla.redhat.com/show_bug.cgi?id=1869893
- https://bugzilla.redhat.com/show_bug.cgi?id=1871064
- https://bugzilla.redhat.com/show_bug.cgi?id=1873235
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4847.json
- https://access.redhat.com/security/cve/CVE-2015-9251
- https://www.cve.org/CVERecord?id=CVE-2015-9251
- https://nvd.nist.gov/vuln/detail/CVE-2015-9251
- https://access.redhat.com/security/cve/CVE-2016-10735
- https://www.cve.org/CVERecord?id=CVE-2016-10735
- https://nvd.nist.gov/vuln/detail/CVE-2016-10735
- https://access.redhat.com/security/cve/CVE-2018-14040
- https://www.cve.org/CVERecord?id=CVE-2018-14040
- https://nvd.nist.gov/vuln/detail/CVE-2018-14040
- https://access.redhat.com/security/cve/CVE-2018-14042
- https://www.cve.org/CVERecord?id=CVE-2018-14042
- https://nvd.nist.gov/vuln/detail/CVE-2018-14042
- https://access.redhat.com/security/cve/CVE-2019-8331
- https://www.cve.org/CVERecord?id=CVE-2019-8331
- https://nvd.nist.gov/vuln/detail/CVE-2019-8331
- https://access.redhat.com/security/cve/CVE-2019-10146
- https://www.cve.org/CVERecord?id=CVE-2019-10146
- https://nvd.nist.gov/vuln/detail/CVE-2019-10146
- https://access.redhat.com/security/cve/CVE-2019-10179
- https://www.cve.org/CVERecord?id=CVE-2019-10179
- https://nvd.nist.gov/vuln/detail/CVE-2019-10179
- https://access.redhat.com/security/cve/CVE-2019-10221
- https://www.cve.org/CVERecord?id=CVE-2019-10221
- https://nvd.nist.gov/vuln/detail/CVE-2019-10221
- https://access.redhat.com/security/cve/CVE-2019-11358
- https://www.cve.org/CVERecord?id=CVE-2019-11358
- https://nvd.nist.gov/vuln/detail/CVE-2019-11358
- https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
- https://www.drupal.org/sa-core-2019-006
- https://access.redhat.com/security/cve/CVE-2020-1721
- https://www.cve.org/CVERecord?id=CVE-2020-1721
- https://nvd.nist.gov/vuln/detail/CVE-2020-1721
- https://access.redhat.com/security/cve/CVE-2020-1935
- https://bugzilla.redhat.com/show_bug.cgi?id=1806835
- https://www.cve.org/CVERecord?id=CVE-2020-1935
- https://nvd.nist.gov/vuln/detail/CVE-2020-1935
- https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.100
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.51
- https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.31
- https://access.redhat.com/security/cve/CVE-2020-1938
- https://bugzilla.redhat.com/show_bug.cgi?id=1806398
- https://www.cve.org/CVERecord?id=CVE-2020-1938
- https://nvd.nist.gov/vuln/detail/CVE-2020-1938
- https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
- https://www.cnvd.org.cn/webinfo/show/5415
- https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://access.redhat.com/security/cve/CVE-2020-11022
- https://www.cve.org/CVERecord?id=CVE-2020-11022
- https://nvd.nist.gov/vuln/detail/CVE-2020-11022
- https://github.com/advisories/GHSA-gxr4-xjj5-5px2
- https://access.redhat.com/security/cve/CVE-2020-11023
- https://www.cve.org/CVERecord?id=CVE-2020-11023
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
- https://access.redhat.com/security/cve/CVE-2020-15720
- https://www.cve.org/CVERecord?id=CVE-2020-15720
- https://nvd.nist.gov/vuln/detail/CVE-2020-15720
- https://access.redhat.com/security/cve/CVE-2020-25715
- https://bugzilla.redhat.com/show_bug.cgi?id=1891016
- https://www.cve.org/CVERecord?id=CVE-2020-25715
- https://nvd.nist.gov/vuln/detail/CVE-2020-25715
- https://access.redhat.com/security/cve/CVE-2022-25762
- https://bugzilla.redhat.com/show_bug.cgi?id=2085304
- https://www.cve.org/CVERecord?id=CVE-2022-25762
- https://nvd.nist.gov/vuln/detail/CVE-2022-25762
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.76
Affected packages
Red Hat:enterprise_linux:8::appstream / jss
Package
- Name
- jss
- Purl
- pkg:rpm/redhat/jss
Red Hat:enterprise_linux:8::appstream / jss-debuginfo
Package
- Name
- jss-debuginfo
- Purl
- pkg:rpm/redhat/jss-debuginfo
Red Hat:enterprise_linux:8::appstream / jss-debugsource
Package
- Name
- jss-debugsource
- Purl
- pkg:rpm/redhat/jss-debugsource
Red Hat:enterprise_linux:8::appstream / jss-javadoc
Package
- Name
- jss-javadoc
- Purl
- pkg:rpm/redhat/jss-javadoc
Red Hat:enterprise_linux:8::appstream / ldapjdk
Package
- Name
- ldapjdk
- Purl
- pkg:rpm/redhat/ldapjdk
Red Hat:enterprise_linux:8::appstream / ldapjdk-javadoc
Package
- Name
- ldapjdk-javadoc
- Purl
- pkg:rpm/redhat/ldapjdk-javadoc
Red Hat:enterprise_linux:8::appstream / pki-base
Package
- Name
- pki-base
- Purl
- pkg:rpm/redhat/pki-base
Red Hat:enterprise_linux:8::appstream / pki-base-java
Package
- Name
- pki-base-java
- Purl
- pkg:rpm/redhat/pki-base-java
Red Hat:enterprise_linux:8::appstream / pki-ca
Package
- Name
- pki-ca
- Purl
- pkg:rpm/redhat/pki-ca
Red Hat:enterprise_linux:8::appstream / pki-core
Package
- Name
- pki-core
- Purl
- pkg:rpm/redhat/pki-core
Red Hat:enterprise_linux:8::appstream / pki-core-debuginfo
Package
- Name
- pki-core-debuginfo
- Purl
- pkg:rpm/redhat/pki-core-debuginfo
Red Hat:enterprise_linux:8::appstream / pki-core-debugsource
Package
- Name
- pki-core-debugsource
- Purl
- pkg:rpm/redhat/pki-core-debugsource
Red Hat:enterprise_linux:8::appstream / pki-kra
Package
- Name
- pki-kra
- Purl
- pkg:rpm/redhat/pki-kra
Red Hat:enterprise_linux:8::appstream / pki-server
Package
- Name
- pki-server
- Purl
- pkg:rpm/redhat/pki-server
Red Hat:enterprise_linux:8::appstream / pki-symkey
Package
- Name
- pki-symkey
- Purl
- pkg:rpm/redhat/pki-symkey
Red Hat:enterprise_linux:8::appstream / pki-symkey-debuginfo
Package
- Name
- pki-symkey-debuginfo
- Purl
- pkg:rpm/redhat/pki-symkey-debuginfo
Red Hat:enterprise_linux:8::appstream / pki-tools
Package
- Name
- pki-tools
- Purl
- pkg:rpm/redhat/pki-tools
Red Hat:enterprise_linux:8::appstream / pki-tools-debuginfo
Package
- Name
- pki-tools-debuginfo
- Purl
- pkg:rpm/redhat/pki-tools-debuginfo
Red Hat:enterprise_linux:8::appstream / python3-pki
Package
- Name
- python3-pki
- Purl
- pkg:rpm/redhat/python3-pki
Red Hat:enterprise_linux:8::appstream / tomcatjss
Package
- Name
- tomcatjss
- Purl
- pkg:rpm/redhat/tomcatjss
Red Hat:enterprise_linux:8::appstream / apache-commons-collections
Package
- Name
- apache-commons-collections
- Purl
- pkg:rpm/redhat/apache-commons-collections
Red Hat:enterprise_linux:8::appstream / apache-commons-lang
Package
- Name
- apache-commons-lang
- Purl
- pkg:rpm/redhat/apache-commons-lang
Red Hat:enterprise_linux:8::appstream / apache-commons-net
Package
- Name
- apache-commons-net
- Purl
- pkg:rpm/redhat/apache-commons-net
Red Hat:enterprise_linux:8::appstream / bea-stax
Package
- Name
- bea-stax
- Purl
- pkg:rpm/redhat/bea-stax
Red Hat:enterprise_linux:8::appstream / bea-stax-api
Package
- Name
- bea-stax-api
- Purl
- pkg:rpm/redhat/bea-stax-api
Red Hat:enterprise_linux:8::appstream / glassfish-fastinfoset
Package
- Name
- glassfish-fastinfoset
- Purl
- pkg:rpm/redhat/glassfish-fastinfoset
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb
Package
- Name
- glassfish-jaxb
- Purl
- pkg:rpm/redhat/glassfish-jaxb
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-api
Package
- Name
- glassfish-jaxb-api
- Purl
- pkg:rpm/redhat/glassfish-jaxb-api
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-core
Package
- Name
- glassfish-jaxb-core
- Purl
- pkg:rpm/redhat/glassfish-jaxb-core
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-runtime
Package
- Name
- glassfish-jaxb-runtime
- Purl
- pkg:rpm/redhat/glassfish-jaxb-runtime
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-txw2
Package
- Name
- glassfish-jaxb-txw2
- Purl
- pkg:rpm/redhat/glassfish-jaxb-txw2
Red Hat:enterprise_linux:8::appstream / jackson-annotations
Package
- Name
- jackson-annotations
- Purl
- pkg:rpm/redhat/jackson-annotations
Red Hat:enterprise_linux:8::appstream / jackson-core
Package
- Name
- jackson-core
- Purl
- pkg:rpm/redhat/jackson-core
Red Hat:enterprise_linux:8::appstream / jackson-databind
Package
- Name
- jackson-databind
- Purl
- pkg:rpm/redhat/jackson-databind
Red Hat:enterprise_linux:8::appstream / jackson-jaxrs-json-provider
Package
- Name
- jackson-jaxrs-json-provider
- Purl
- pkg:rpm/redhat/jackson-jaxrs-json-provider
Red Hat:enterprise_linux:8::appstream / jackson-jaxrs-providers
Package
- Name
- jackson-jaxrs-providers
- Purl
- pkg:rpm/redhat/jackson-jaxrs-providers
Red Hat:enterprise_linux:8::appstream / jackson-module-jaxb-annotations
Package
- Name
- jackson-module-jaxb-annotations
- Purl
- pkg:rpm/redhat/jackson-module-jaxb-annotations
Red Hat:enterprise_linux:8::appstream / jakarta-commons-httpclient
Package
- Name
- jakarta-commons-httpclient
- Purl
- pkg:rpm/redhat/jakarta-commons-httpclient
Red Hat:enterprise_linux:8::appstream / javassist
Package
- Name
- javassist
- Purl
- pkg:rpm/redhat/javassist
Red Hat:enterprise_linux:8::appstream / javassist-javadoc
Package
- Name
- javassist-javadoc
- Purl
- pkg:rpm/redhat/javassist-javadoc
Red Hat:enterprise_linux:8::appstream / pki-servlet-4.0-api
Package
- Name
- pki-servlet-4.0-api
- Purl
- pkg:rpm/redhat/pki-servlet-4.0-api
Red Hat:enterprise_linux:8::appstream / pki-servlet-engine
Package
- Name
- pki-servlet-engine
- Purl
- pkg:rpm/redhat/pki-servlet-engine
Red Hat:enterprise_linux:8::appstream / python-nss
Package
- Name
- python-nss
- Purl
- pkg:rpm/redhat/python-nss
Red Hat:enterprise_linux:8::appstream / python-nss-debugsource
Package
- Name
- python-nss-debugsource
- Purl
- pkg:rpm/redhat/python-nss-debugsource
Red Hat:enterprise_linux:8::appstream / python-nss-doc
Package
- Name
- python-nss-doc
- Purl
- pkg:rpm/redhat/python-nss-doc
Red Hat:enterprise_linux:8::appstream / python3-nss
Package
- Name
- python3-nss
- Purl
- pkg:rpm/redhat/python3-nss
Red Hat:enterprise_linux:8::appstream / python3-nss-debuginfo
Package
- Name
- python3-nss-debuginfo
- Purl
- pkg:rpm/redhat/python3-nss-debuginfo
Red Hat:enterprise_linux:8::appstream / relaxngDatatype
Package
- Name
- relaxngDatatype
- Purl
- pkg:rpm/redhat/relaxngDatatype
Red Hat:enterprise_linux:8::appstream / resteasy
Package
- Name
- resteasy
- Purl
- pkg:rpm/redhat/resteasy
Red Hat:enterprise_linux:8::appstream / slf4j
Package
- Name
- slf4j
- Purl
- pkg:rpm/redhat/slf4j
Red Hat:enterprise_linux:8::appstream / slf4j-jdk14
Package
- Name
- slf4j-jdk14
- Purl
- pkg:rpm/redhat/slf4j-jdk14
Red Hat:enterprise_linux:8::appstream / stax-ex
Package
- Name
- stax-ex
- Purl
- pkg:rpm/redhat/stax-ex
Red Hat:enterprise_linux:8::appstream / velocity
Package
- Name
- velocity
- Purl
- pkg:rpm/redhat/velocity
Red Hat:enterprise_linux:8::appstream / xalan-j2
Package
- Name
- xalan-j2
- Purl
- pkg:rpm/redhat/xalan-j2
Red Hat:enterprise_linux:8::appstream / xerces-j2
Package
- Name
- xerces-j2
- Purl
- pkg:rpm/redhat/xerces-j2
Red Hat:enterprise_linux:8::appstream / xml-commons-apis
Package
- Name
- xml-commons-apis
- Purl
- pkg:rpm/redhat/xml-commons-apis
Red Hat:enterprise_linux:8::appstream / xml-commons-resolver
Package
- Name
- xml-commons-resolver
- Purl
- pkg:rpm/redhat/xml-commons-resolver
Red Hat:enterprise_linux:8::appstream / xmlstreambuffer
Package
- Name
- xmlstreambuffer
- Purl
- pkg:rpm/redhat/xmlstreambuffer