# RHSA-2019:1529: Security update for 33 packages RHSA-2019:1529, released June 18, 2019, fixes 4 CVEs across 33 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2019-1529 - Platform: Linux - Released: Jun 18, 2019 - Priority: High (Closes CVE-2018-8034, high severity) - CVEs: 4, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2019:1529 ## Applies to | Product | Release | Fixed in | |---|---|---| | [apache-commons-collections](https://patchblox.com/security/data/product/linux/apache-commons-collections.md) | RHEL 8 | 0:3.2.2-10.module+el8.0.0+3248+9d514f3b | | [apache-commons-lang](https://patchblox.com/security/data/product/linux/apache-commons-lang.md) | RHEL 8 | 0:2.6-21.module+el8.0.0+3248+9d514f3b | | [bea-stax-api](https://patchblox.com/security/data/product/linux/bea-stax-api.md) | RHEL 8 | 0:1.2.0-16.module+el8.0.0+3248+9d514f3b | | [glassfish-fastinfoset](https://patchblox.com/security/data/product/linux/glassfish-fastinfoset.md) | RHEL 8 | 0:1.2.13-9.module+el8.0.0+3248+9d514f3b | | [glassfish-jaxb-api](https://patchblox.com/security/data/product/linux/glassfish-jaxb-api.md) | RHEL 8 | 0:2.2.12-8.module+el8.0.0+3248+9d514f3b | | [glassfish-jaxb-core](https://patchblox.com/security/data/product/linux/glassfish-jaxb-core.md) | RHEL 8 | 0:2.2.11-11.module+el8.0.0+3248+9d514f3b | | [glassfish-jaxb-runtime](https://patchblox.com/security/data/product/linux/glassfish-jaxb-runtime.md) | RHEL 8 | 0:2.2.11-11.module+el8.0.0+3248+9d514f3b | | [glassfish-jaxb-txw2](https://patchblox.com/security/data/product/linux/glassfish-jaxb-txw2.md) | RHEL 8 | 0:2.2.11-11.module+el8.0.0+3248+9d514f3b | | [jackson-annotations](https://patchblox.com/security/data/product/linux/jackson-annotations.md) | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | | [jackson-core](https://patchblox.com/security/data/product/linux/jackson-core.md) | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | | [jackson-databind](https://patchblox.com/security/data/product/linux/jackson-databind.md) | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | | [jackson-jaxrs-json-provider](https://patchblox.com/security/data/product/linux/jackson-jaxrs-json-provider.md) | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | | [jackson-jaxrs-providers](https://patchblox.com/security/data/product/linux/jackson-jaxrs-providers.md) | RHEL 8 | 0:2.9.8-1.module+el8.0.0+3248+9d514f3b | | [jackson-module-jaxb-annotations](https://patchblox.com/security/data/product/linux/jackson-module-jaxb-annotations.md) | RHEL 8 | 0:2.7.6-4.module+el8.0.0+3248+9d514f3b | | [jakarta-commons-httpclient](https://patchblox.com/security/data/product/linux/jakarta-commons-httpclient.md) | RHEL 8 | 1:3.1-28.module+el8.0.0+3248+9d514f3b | | [javassist](https://patchblox.com/security/data/product/linux/javassist.md) | RHEL 8 | 0:3.18.1-8.module+el8.0.0+3248+9d514f3b | | [javassist-javadoc](https://patchblox.com/security/data/product/linux/javassist-javadoc.md) | RHEL 8 | 0:3.18.1-8.module+el8.0.0+3248+9d514f3b | | [pki-servlet-4.0-api](https://patchblox.com/security/data/product/linux/pki-servlet-4.0-api.md) | RHEL 8 | 1:9.0.7-14.module+el8.0.0+3248+9d514f3b | | [pki-servlet-container](https://patchblox.com/security/data/product/linux/pki-servlet-container.md) | RHEL 8 | 1:9.0.7-14.module+el8.0.0+3248+9d514f3b | | [python-nss-doc](https://patchblox.com/security/data/product/linux/python-nss-doc.md) | RHEL 8 | 0:1.0.1-10.module+el8.0.0+3248+9d514f3b | | [python3-nss](https://patchblox.com/security/data/product/linux/python3-nss.md) | RHEL 8 | 0:1.0.1-10.module+el8.0.0+3248+9d514f3b | | [relaxngDatatype](https://patchblox.com/security/data/product/linux/relaxngdatatype.md) | RHEL 8 | 0:2011.1-7.module+el8.0.0+3248+9d514f3b | | [resteasy](https://patchblox.com/security/data/product/linux/resteasy.md) | RHEL 8 | 0:3.0.26-3.module+el8.0.0+3248+9d514f3b | | [slf4j](https://patchblox.com/security/data/product/linux/slf4j.md) | RHEL 8 | 0:1.7.25-4.module+el8.0.0+3248+9d514f3b | | [slf4j-jdk14](https://patchblox.com/security/data/product/linux/slf4j-jdk14.md) | RHEL 8 | 0:1.7.25-4.module+el8.0.0+3248+9d514f3b | | [stax-ex](https://patchblox.com/security/data/product/linux/stax-ex.md) | RHEL 8 | 0:1.7.7-8.module+el8.0.0+3248+9d514f3b | | [velocity](https://patchblox.com/security/data/product/linux/velocity.md) | RHEL 8 | 0:1.7-24.module+el8.0.0+3248+9d514f3b | | [xalan-j2](https://patchblox.com/security/data/product/linux/xalan-j2.md) | RHEL 8 | 0:2.7.1-38.module+el8.0.0+3248+9d514f3b | | [xerces-j2](https://patchblox.com/security/data/product/linux/xerces-j2.md) | RHEL 8 | 0:2.11.0-34.module+el8.0.0+3248+9d514f3b | | [xml-commons-apis](https://patchblox.com/security/data/product/linux/xml-commons-apis.md) | RHEL 8 | 0:1.4.01-25.module+el8.0.0+3248+9d514f3b | | [xml-commons-resolver](https://patchblox.com/security/data/product/linux/xml-commons-resolver.md) | RHEL 8 | 0:1.2-26.module+el8.0.0+3248+9d514f3b | | [xmlstreambuffer](https://patchblox.com/security/data/product/linux/xmlstreambuffer.md) | RHEL 8 | 0:1.5.4-8.module+el8.0.0+3248+9d514f3b | | [xsom](https://patchblox.com/security/data/product/linux/xsom.md) | RHEL 8 | 0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2018-8034](https://patchblox.com/security/data/cve/CVE-2018-8034.md) | High | pki-servlet-4.0-api: The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-co... | 7.5 | 0.2105 | | | [CVE-2018-8014](https://patchblox.com/security/data/cve/CVE-2018-8014.md) | High | apache-commons-collections: The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-co... | 9.8 | 0.2094 | | | [CVE-2018-8037](https://patchblox.com/security/data/cve/CVE-2018-8037.md) | High | apache-commons-collections: The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-co... | 9.1 | 0.1116 | | | [CVE-2018-11784](https://patchblox.com/security/data/cve/CVE-2018-11784.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-co... | 5.3 | 0.9768 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo