Linux · Oracle Linux · Security advisory · May 24, 2024

ELSA-2024-3061: Security update for 50 packages

ELSA-2024-3061, released May 24, 2024, fixes 1 CVE across 50 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0486
92nd percentile

Fixed package versions

ProductReleaseFixed in
apache-commons-collectionsol 80:3.2.2-10.module+el8.10.0+90302+23fbc0c1
apache-commons-langol 80:2.6-21.module+el8.10.0+90302+23fbc0c1
apache-commons-netol 80:3.6-3.module+el8.10.0+90302+23fbc0c1
bea-stax-apiol 80:1.2.0-16.module+el8.10.0+90302+23fbc0c1
fasterxml-oss-parentol 80:49-1.module+el8.10.0+90302+23fbc0c1
glassfish-fastinfosetol 80:1.2.13-9.module+el8.10.0+90302+23fbc0c1
glassfish-jaxb-apiol 80:2.2.12-8.module+el8.10.0+90302+23fbc0c1
glassfish-jaxb-coreol 80:2.2.11-12.module+el8.10.0+90302+23fbc0c1
glassfish-jaxb-runtimeol 80:2.2.11-12.module+el8.10.0+90302+23fbc0c1
glassfish-jaxb-txw2ol 80:2.2.11-12.module+el8.10.0+90302+23fbc0c1
idm-jssol 80:4.11.0-1.module+el8.10.0+90282+4ef18d4b
idm-jss-javadocol 80:4.11.0-1.module+el8.10.0+90282+4ef18d4b
idm-ldapjdkol 80:4.24.0-1.module+el8.10.0+90282+4ef18d4b
idm-ldapjdk-javadocol 80:4.24.0-1.module+el8.10.0+90282+4ef18d4b
idm-pki-acmeol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-baseol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-base-javaol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-caol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-kraol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-serverol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-symkeyol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-pki-toolsol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
idm-tomcatjssol 80:7.8.0-1.module+el8.10.0+90282+4ef18d4b
jackson-annotationsol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-bomol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-coreol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-databindol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-jaxrs-json-providerol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-jaxrs-providersol 80:2.14.2-1.module+el8.10.0+90302+23fbc0c1
jackson-module-jaxb-annotationsol 80:2.14.2-2.module+el8.10.0+90302+23fbc0c1
jackson-modules-baseol 80:2.14.2-2.module+el8.10.0+90302+23fbc0c1
jackson-parentol 80:2.14-1.module+el8.10.0+90302+23fbc0c1
jakarta-commons-httpclientol 81:3.1-28.module+el8.10.0+90302+23fbc0c1
javassistol 80:3.18.1-8.module+el8.10.0+90302+23fbc0c1
javassist-javadocol 80:3.18.1-8.module+el8.10.0+90302+23fbc0c1
pki-servlet-engineol 81:9.0.62-1.module+el8.10.0+90302+23fbc0c1
python3-idm-pkiol 80:10.15.0-1.0.1.module+el8.10.0+90282+4ef18d4b
relaxngDatatypeol 80:2011.1-7.module+el8.10.0+90302+23fbc0c1
resteasyol 80:3.0.26-7.module+el8.10.0+90282+4ef18d4b
resteasy-javadocol 80:3.0.26-7.module+el8.10.0+90282+4ef18d4b
slf4jol 80:1.7.25-4.module+el8.10.0+90302+23fbc0c1
slf4j-jdk14ol 80:1.7.25-4.module+el8.10.0+90302+23fbc0c1
stax-exol 80:1.7.7-8.module+el8.10.0+90302+23fbc0c1
velocityol 80:1.7-24.module+el8.10.0+90302+23fbc0c1
xalan-j2ol 80:2.7.1-38.module+el8.10.0+90302+23fbc0c1
xerces-j2ol 80:2.11.0-34.module+el8.10.0+90302+23fbc0c1
xml-commons-apisol 80:1.4.01-25.module+el8.10.0+90302+23fbc0c1
xml-commons-resolverol 80:1.2-26.module+el8.10.0+90302+23fbc0c1
xmlstreambufferol 80:1.5.4-8.module+el8.10.0+90302+23fbc0c1
xsomol 80:0-19.20110809svn.module+el8.10.0+90302+23fbc0c1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-36518 fasterxml-oss-parent: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...7.5 0.0486 None reported
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.