pki-core:10.6 security update

エラータID: AXSA:2024-8411:01

Release date: 
Thursday, June 20, 2024 - 15:58
Subject: 
pki-core:10.6 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Asianux Certificate System.

Security Fix(es):

* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.10 Release Notes linked from the References section.

CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Modularity name: "pki-core"
Stream name: "10.6"

Solution: 

Update packages.

CVEs: 
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Additional Info: 

N/A

Download: 

SRPMS
  1. jss-4.11.0-1.module+el8+1765+415a7bd4.src.rpm
    MD5: 995f10a1e62fedd8fd8078011d7cf254
    SHA-256: 16cde55050b3b9d84877f2898a6b27a22e600a3c527c54d426921f77479862d4
    Size: 0.99 MB
  2. ldapjdk-4.24.0-1.module+el8+1765+415a7bd4.src.rpm
    MD5: 2110f9fd82a5927bc58beddecac1ddf2
    SHA-256: dd2e9a676087a60452b3aae218715a67eda5b9da5090c32e3eac7338415bcb12
    Size: 2.84 MB
  3. pki-core-10.15.0-1.module+el8+1765+415a7bd4.src.rpm
    MD5: 67f31f654d0965d3877cfa1b3ffd34f9
    SHA-256: d1858e20fc2fead76fc0bbc55a980550fb9331af78feae1128ba7396aeabd325
    Size: 10.52 MB
  4. resteasy-3.0.26-7.module+el8+1765+415a7bd4.src.rpm
    MD5: 63bd3d1b18c72b4c80ab6250d10a5a31
    SHA-256: 1762884a6734d769c84775a02a5295cd60a84078239716b7bb1de4ce58e9543e
    Size: 7.46 MB
  5. tomcatjss-7.8.0-1.module+el8+1765+415a7bd4.src.rpm
    MD5: 8ef0e6a2e13a5a797e859bc1cadb3abf
    SHA-256: a67d8459d5703bfdb80d8be353e6157080e68c13e8230c9236666e727b9310cc
    Size: 44.33 kB

Asianux Server 8 for x86_64
  1. idm-jss-4.11.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: 9f380b852299f56d4b1aae8ce6ab859a
    SHA-256: 2068357771f0079031a5538b2f1b9b59573e63d0abb24b96f875c95e2e6a2d75
    Size: 1.19 MB
  2. idm-jss-javadoc-4.11.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: 5c753c18d8ca2e36cf98f70af679a2db
    SHA-256: f7c3deccaa5553f9c692cdc64333516869d57a49b2ee6b07df5c0bafa66bbc42
    Size: 1.00 MB
  3. idm-ldapjdk-4.24.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 8a004e738e6cac9f338c55c5a90fb9b3
    SHA-256: 885ce3a89f3e804ff0cd4f63d69714d3e74f0003fef1cf74e30dc988e536f699
    Size: 322.10 kB
  4. idm-ldapjdk-javadoc-4.24.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 3a4f71045774ef57c962938a14426b6a
    SHA-256: 220ff541a3b2cc5044c938d87d521ccb2bbccbe57cc3af7e510bb6a133e644cf
    Size: 374.56 kB
  5. idm-pki-acme-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 487307c32d61a06fe8dea759e03e2478
    SHA-256: 792a28857721ba53dfab0efb571e41b6f0aab4099f434234860f08ae0fd7ca91
    Size: 0.97 MB
  6. idm-pki-base-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: b2eec4ea77e490a4b3d08663cf468381
    SHA-256: ecd8cd5383f4a6d659cfed319ab12ebcf6c21f213ba9867128ec7e2ce1c01417
    Size: 295.80 kB
  7. idm-pki-base-java-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 250713f8eeba1b033276e8ac8fd90259
    SHA-256: 4ab225e987463e66947c23ab9440a0b8f303c96ddab47c53fad4b09c35945f09
    Size: 668.26 kB
  8. idm-pki-ca-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: e68998814f4b5268878a3b536205bc20
    SHA-256: c06813002e528800ce2dc6290bd7d682dbc38e955df464be7850139917d88969
    Size: 1.31 MB
  9. idm-pki-kra-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: eec7dad6aa0c99c43fed13b8176205af
    SHA-256: 43bf332a2536ad732d1e86a67622ba77a42acdce0a7f7efbaaf38efb0ed90d4e
    Size: 289.62 kB
  10. idm-pki-server-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 5af2f5e7c711832ba92a63dfda44ba4d
    SHA-256: 3b9e06bf000840ef030da00b7b2105746311e03e0606bd2d65e632ba66f96917
    Size: 2.61 MB
  11. idm-pki-symkey-10.15.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: 3a0a3f644d1c832194d6b4d923fe3aa5
    SHA-256: 8ada9b46d3d89c6b50ad263ff817f125a69001bc43ee666b0657d9f5ef9a298f
    Size: 57.10 kB
  12. idm-pki-tools-10.15.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: b430b3775632bb63849a00d1de7a056b
    SHA-256: 1adeb613cdb386e2ea32ee4b1db7da244f0459d19ea0f9cf2fc2c091883b90c0
    Size: 795.58 kB
  13. idm-tomcatjss-7.8.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 79d6f563f67dda2c1a1771892a7dea16
    SHA-256: 79094a4321a486a8ef724a1f94de1a94ed61ceda87cd2d671cc91dc581f79ddc
    Size: 38.59 kB
  14. jss-debugsource-4.11.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: 68de51061437f0839b6f8bdcfa84725d
    SHA-256: 4c629b216aa7b7468a410bd0499e14b7f156b0257498e75f645ffe32253a320a
    Size: 147.17 kB
  15. pki-core-debugsource-10.15.0-1.module+el8+1765+415a7bd4.x86_64.rpm
    MD5: 03905a1443cf58662749504774020ee8
    SHA-256: 2014a70bc5e26809f0a1d3e9e4b53bffa6b567cbc60cb323f95edbf55651bf02
    Size: 172.65 kB
  16. python3-idm-pki-10.15.0-1.module+el8+1765+415a7bd4.noarch.rpm
    MD5: e54cb17cfc29cc1c9cc8cb390f5def8e
    SHA-256: 5138372af0a1a7650adb4d858171f59325786dbdad61416e9ca0666c0333641b
    Size: 166.58 kB
  17. resteasy-3.0.26-7.module+el8+1765+415a7bd4.noarch.rpm
    MD5: de3eb17b23b4b40ded258c5f3ed82c90
    SHA-256: a657fcf1066d8ba54509da683f161fd408fa49d454c1d1e430dc439568e87d83
    Size: 1.06 MB
  18. resteasy-javadoc-3.0.26-7.module+el8+1765+415a7bd4.noarch.rpm
    MD5: 711a9d1b8fd32b68996eb81e60743213
    SHA-256: 231d4ac762dc08048e50780246aa99569799329583b51cf8131be687f794b9ef
    Size: 1.14 MB