RHSA-2024:3061
- Source
- https://access.redhat.com/errata/RHSA-2024:3061
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2024:3061.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/RHSA-2024:3061
- Upstream
- Published
- 2024-09-13T15:48:09Z
- Modified
- 2025-09-11T12:35:00Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2024:3061
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
- https://bugzilla.redhat.com/show_bug.cgi?id=2064698
- https://issues.redhat.com/browse/RHEL-12764
- https://issues.redhat.com/browse/RHEL-12765
- https://issues.redhat.com/browse/RHEL-16724
- https://issues.redhat.com/browse/RHEL-19140
- https://issues.redhat.com/browse/RHEL-22445
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3061.json
- https://access.redhat.com/security/cve/CVE-2020-36518
- https://www.cve.org/CVERecord?id=CVE-2020-36518
- https://nvd.nist.gov/vuln/detail/CVE-2020-36518
- https://github.com/advisories/GHSA-57j2-w4cx-62h2
Affected packages
Red Hat:enterprise_linux:8::appstream / apache-commons-collections-3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- apache-commons-collections-3.2.2-10.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/apache-commons-collections
Red Hat:enterprise_linux:8::appstream / apache-commons-collections-3.2.2-10.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- apache-commons-collections-3.2.2-10.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/apache-commons-collections
Red Hat:enterprise_linux:8::appstream / apache-commons-lang-2.6-21.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- apache-commons-lang-2.6-21.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/apache-commons-lang
Red Hat:enterprise_linux:8::appstream / apache-commons-lang-2.6-21.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- apache-commons-lang-2.6-21.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/apache-commons-lang
Red Hat:enterprise_linux:8::appstream / apache-commons-net-3.6-3.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- apache-commons-net-3.6-3.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/apache-commons-net
Red Hat:enterprise_linux:8::appstream / apache-commons-net-3.6-3.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- apache-commons-net-3.6-3.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/apache-commons-net
Red Hat:enterprise_linux:8::appstream / bea-stax-1.2.0-16.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- bea-stax-1.2.0-16.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/bea-stax
Red Hat:enterprise_linux:8::appstream / bea-stax-api-1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- bea-stax-api-1.2.0-16.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/bea-stax-api
Red Hat:enterprise_linux:8::appstream / fasterxml-oss-parent-49-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- fasterxml-oss-parent-49-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/fasterxml-oss-parent
Red Hat:enterprise_linux:8::appstream / fasterxml-oss-parent-49-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- fasterxml-oss-parent-49-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/fasterxml-oss-parent
Red Hat:enterprise_linux:8::appstream / glassfish-fastinfoset-1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- glassfish-fastinfoset-1.2.13-9.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-fastinfoset
Red Hat:enterprise_linux:8::appstream / glassfish-fastinfoset-1.2.13-9.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- glassfish-fastinfoset-1.2.13-9.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-fastinfoset
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-2.2.11-12.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- glassfish-jaxb-2.2.11-12.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-api-2.2.12-8.module+el8.10.0+21035+a01f6469.noarch.rpm
Package
- Name
- glassfish-jaxb-api-2.2.12-8.module+el8.10.0+21035+a01f6469.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-api
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-api-2.2.12-8.module+el8.10.0+21035+a01f6469.src.rpm
Package
- Name
- glassfish-jaxb-api-2.2.12-8.module+el8.10.0+21035+a01f6469.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-api
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-core-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- glassfish-jaxb-core-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-core
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-runtime-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- glassfish-jaxb-runtime-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-runtime
Red Hat:enterprise_linux:8::appstream / glassfish-jaxb-txw2-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- glassfish-jaxb-txw2-2.2.11-12.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-txw2
Red Hat:enterprise_linux:8::appstream / jackson-annotations-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-annotations-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-annotations
Red Hat:enterprise_linux:8::appstream / jackson-annotations-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-annotations-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-annotations
Red Hat:enterprise_linux:8::appstream / jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-bom
Red Hat:enterprise_linux:8::appstream / jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-bom-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-bom
Red Hat:enterprise_linux:8::appstream / jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-core
Red Hat:enterprise_linux:8::appstream / jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-core-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-core
Red Hat:enterprise_linux:8::appstream / jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-databind
Red Hat:enterprise_linux:8::appstream / jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-databind-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-databind
Red Hat:enterprise_linux:8::appstream / jackson-jaxrs-json-provider-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-jaxrs-json-provider-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-json-provider
Red Hat:enterprise_linux:8::appstream / jackson-jaxrs-providers-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-jaxrs-providers-2.14.2-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-providers
Red Hat:enterprise_linux:8::appstream / jackson-jaxrs-providers-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-jaxrs-providers-2.14.2-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-providers
Red Hat:enterprise_linux:8::appstream / jackson-module-jaxb-annotations-2.14.2-2.module+el8.10.0+21055+7d27fa3b.noarch.rpm
Package
- Name
- jackson-module-jaxb-annotations-2.14.2-2.module+el8.10.0+21055+7d27fa3b.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-module-jaxb-annotations
Red Hat:enterprise_linux:8::appstream / jackson-modules-base-2.14.2-2.module+el8.10.0+21055+7d27fa3b.noarch.rpm
Package
- Name
- jackson-modules-base-2.14.2-2.module+el8.10.0+21055+7d27fa3b.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-modules-base
Red Hat:enterprise_linux:8::appstream / jackson-modules-base-2.14.2-2.module+el8.10.0+21055+7d27fa3b.src.rpm
Package
- Name
- jackson-modules-base-2.14.2-2.module+el8.10.0+21055+7d27fa3b.src.rpm
- Purl
- pkg:rpm/redhat/jackson-modules-base
Red Hat:enterprise_linux:8::appstream / jackson-parent-2.14-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jackson-parent-2.14-1.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-parent
Red Hat:enterprise_linux:8::appstream / jackson-parent-2.14-1.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jackson-parent-2.14-1.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jackson-parent
Red Hat:enterprise_linux:8::appstream / jakarta-commons-httpclient-3.1-28.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- jakarta-commons-httpclient-3.1-28.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/jakarta-commons-httpclient
Red Hat:enterprise_linux:8::appstream / jakarta-commons-httpclient-3.1-28.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- jakarta-commons-httpclient-3.1-28.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/jakarta-commons-httpclient
Red Hat:enterprise_linux:8::appstream / javassist-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- javassist-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/javassist
Red Hat:enterprise_linux:8::appstream / javassist-3.18.1-8.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- javassist-3.18.1-8.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/javassist
Red Hat:enterprise_linux:8::appstream / javassist-javadoc-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- javassist-javadoc-3.18.1-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/javassist-javadoc
Red Hat:enterprise_linux:8::appstream / pki-servlet-engine-9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch.rpm
Package
- Name
- pki-servlet-engine-9.0.62-1.module+el8.10.0+21257+2b5308b5.noarch.rpm
- Purl
- pkg:rpm/redhat/pki-servlet-engine
Red Hat:enterprise_linux:8::appstream / pki-servlet-engine-9.0.62-1.module+el8.10.0+21257+2b5308b5.src.rpm
Package
- Name
- pki-servlet-engine-9.0.62-1.module+el8.10.0+21257+2b5308b5.src.rpm
- Purl
- pkg:rpm/redhat/pki-servlet-engine
Red Hat:enterprise_linux:8::appstream / relaxngDatatype-2011.1-7.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- relaxngDatatype-2011.1-7.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/relaxngDatatype
Red Hat:enterprise_linux:8::appstream / relaxngDatatype-2011.1-7.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- relaxngDatatype-2011.1-7.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/relaxngDatatype
Red Hat:enterprise_linux:8::appstream / slf4j-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- slf4j-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/slf4j
Red Hat:enterprise_linux:8::appstream / slf4j-1.7.25-4.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- slf4j-1.7.25-4.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/slf4j
Red Hat:enterprise_linux:8::appstream / slf4j-jdk14-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- slf4j-jdk14-1.7.25-4.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/slf4j-jdk14
Red Hat:enterprise_linux:8::appstream / stax-ex-1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- stax-ex-1.7.7-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/stax-ex
Red Hat:enterprise_linux:8::appstream / stax-ex-1.7.7-8.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- stax-ex-1.7.7-8.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/stax-ex
Red Hat:enterprise_linux:8::appstream / velocity-1.7-24.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- velocity-1.7-24.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/velocity
Red Hat:enterprise_linux:8::appstream / velocity-1.7-24.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- velocity-1.7-24.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/velocity
Red Hat:enterprise_linux:8::appstream / xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xalan-j2
Red Hat:enterprise_linux:8::appstream / xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- xalan-j2-2.7.1-38.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/xalan-j2
Red Hat:enterprise_linux:8::appstream / xerces-j2-2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xerces-j2-2.11.0-34.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xerces-j2
Red Hat:enterprise_linux:8::appstream / xerces-j2-2.11.0-34.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- xerces-j2-2.11.0-34.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/xerces-j2
Red Hat:enterprise_linux:8::appstream / xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xml-commons-apis
Red Hat:enterprise_linux:8::appstream / xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- xml-commons-apis-1.4.01-25.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/xml-commons-apis
Red Hat:enterprise_linux:8::appstream / xml-commons-resolver-1.2-26.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xml-commons-resolver-1.2-26.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xml-commons-resolver
Red Hat:enterprise_linux:8::appstream / xml-commons-resolver-1.2-26.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- xml-commons-resolver-1.2-26.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/xml-commons-resolver
Red Hat:enterprise_linux:8::appstream / xmlstreambuffer-1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xmlstreambuffer-1.5.4-8.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xmlstreambuffer
Red Hat:enterprise_linux:8::appstream / xmlstreambuffer-1.5.4-8.module+el8.10.0+20993+d0f024b0.src.rpm
Package
- Name
- xmlstreambuffer-1.5.4-8.module+el8.10.0+20993+d0f024b0.src.rpm
- Purl
- pkg:rpm/redhat/xmlstreambuffer
Red Hat:enterprise_linux:8::appstream / xsom-0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch.rpm
Package
- Name
- xsom-0-19.20110809svn.module+el8.10.0+20993+d0f024b0.noarch.rpm
- Purl
- pkg:rpm/redhat/xsom