Linux · Security advisory · May 18, 2021

RHSA-2021:1775: Security update for 48 packages

RHSA-2021:1775, released May 18, 2021, fixes 1 CVE across 48 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0202
81st percentile

Fixed package versions

ProductReleaseFixed in
apache-commons-collectionsRHEL 80:3.2.2-10.module+el8.1.0+3366+6dfb954c
apache-commons-langRHEL 80:2.6-21.module+el8.1.0+3366+6dfb954c
apache-commons-netRHEL 80:3.6-3.module+el8.3.0+6805+72837426
bea-stax-apiRHEL 80:1.2.0-16.module+el8.1.0+3366+6dfb954c
glassfish-fastinfosetRHEL 80:1.2.13-9.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-apiRHEL 80:2.2.12-8.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-coreRHEL 80:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-runtimeRHEL 80:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-txw2RHEL 80:2.2.11-11.module+el8.1.0+3366+6dfb954c
jackson-annotationsRHEL 80:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-coreRHEL 80:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-databindRHEL 80:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-jaxrs-json-providerRHEL 80:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-jaxrs-providersRHEL 80:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-module-jaxb-annotationsRHEL 80:2.7.6-4.module+el8.1.0+3366+6dfb954c
jakarta-commons-httpclientRHEL 81:3.1-28.module+el8.1.0+3366+6dfb954c
javassistRHEL 80:3.18.1-8.module+el8.1.0+3366+6dfb954c
javassist-javadocRHEL 80:3.18.1-8.module+el8.1.0+3366+6dfb954c
jssRHEL 80:4.8.1-2.module+el8.4.0+10451+3e5b5448
jss-javadocRHEL 80:4.8.1-2.module+el8.4.0+10451+3e5b5448
ldapjdkRHEL 80:4.22.0-1.module+el8.3.0+6784+6e1e4c62
ldapjdk-javadocRHEL 80:4.22.0-1.module+el8.3.0+6784+6e1e4c62
pki-acmeRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-baseRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-base-javaRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-caRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-kraRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-serverRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-servlet-4.0-apiRHEL 81:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-servlet-engineRHEL 81:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-symkeyRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
pki-toolsRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
python-nss-docRHEL 80:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nssRHEL 80:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-pkiRHEL 80:10.10.5-2.module+el8.4.0+10466+9830f79e
relaxngDatatypeRHEL 80:2011.1-7.module+el8.1.0+3366+6dfb954c
resteasyRHEL 80:3.0.26-6.module+el8.4.0+8891+bb8828ef
slf4jRHEL 80:1.7.25-4.module+el8.1.0+3366+6dfb954c
slf4j-jdk14RHEL 80:1.7.25-4.module+el8.1.0+3366+6dfb954c
stax-exRHEL 80:1.7.7-8.module+el8.2.0+5723+4574fbff
tomcatjssRHEL 80:7.6.1-1.module+el8.4.0+8778+d07929ff
velocityRHEL 80:1.7-24.module+el8.1.0+3366+6dfb954c
xalan-j2RHEL 80:2.7.1-38.module+el8.1.0+3366+6dfb954c
xerces-j2RHEL 80:2.11.0-34.module+el8.1.0+3366+6dfb954c
xml-commons-apisRHEL 80:1.4.01-25.module+el8.1.0+3366+6dfb954c
xml-commons-resolverRHEL 80:1.2-26.module+el8.1.0+3366+6dfb954c
xmlstreambufferRHEL 80:1.5.4-8.module+el8.2.0+5723+4574fbff
xsomRHEL 80:0-19.20110809svn.module+el8.1.0+3366+6dfb954c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-1695 libresteasy-java: A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final andall resteasy 4.x.x versions prior to 4.6.0.F... 7.5 0.0202 None reported
Showing 1 to 1 of 1 1