RHSA-2024:8567
- Source
- https://access.redhat.com/errata/RHSA-2024:8567
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2024:8567.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/RHSA-2024:8567
- Upstream
- Published
- 2024-10-30T09:33:35Z
- Modified
- 2025-09-13T10:09:46Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: pki-deps:10.6 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2024:8567
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2314686
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8567.json
- https://access.redhat.com/security/cve/CVE-2024-38286
- https://www.cve.org/CVERecord?id=CVE-2024-38286
- https://nvd.nist.gov/vuln/detail/CVE-2024-38286
- https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s
Affected packages
Red Hat:rhel_aus:8.2::appstream / apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/apache-commons-collections
Red Hat:rhel_aus:8.2::appstream / apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/apache-commons-collections
Red Hat:rhel_aus:8.2::appstream / apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/apache-commons-lang
Red Hat:rhel_aus:8.2::appstream / apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/apache-commons-lang
Red Hat:rhel_aus:8.2::appstream / bea-stax-1.2.0-16.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- bea-stax-1.2.0-16.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/bea-stax
Red Hat:rhel_aus:8.2::appstream / bea-stax-api-1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- bea-stax-api-1.2.0-16.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/bea-stax-api
Red Hat:rhel_aus:8.2::appstream / glassfish-fastinfoset-1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- glassfish-fastinfoset-1.2.13-9.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-fastinfoset
Red Hat:rhel_aus:8.2::appstream / glassfish-fastinfoset-1.2.13-9.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- glassfish-fastinfoset-1.2.13-9.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-fastinfoset
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-2.2.11-11.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- glassfish-jaxb-2.2.11-11.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- glassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-api
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- glassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-api
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-core-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- glassfish-jaxb-core-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-core
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-runtime-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- glassfish-jaxb-runtime-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-runtime
Red Hat:rhel_aus:8.2::appstream / glassfish-jaxb-txw2-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- glassfish-jaxb-txw2-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/glassfish-jaxb-txw2
Red Hat:rhel_aus:8.2::appstream / jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
Package
- Name
- jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-annotations
Red Hat:rhel_aus:8.2::appstream / jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
Package
- Name
- jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
- Purl
- pkg:rpm/redhat/jackson-annotations
Red Hat:rhel_aus:8.2::appstream / jackson-core-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
Package
- Name
- jackson-core-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-core
Red Hat:rhel_aus:8.2::appstream / jackson-core-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
Package
- Name
- jackson-core-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
- Purl
- pkg:rpm/redhat/jackson-core
Red Hat:rhel_aus:8.2::appstream / jackson-databind-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
Package
- Name
- jackson-databind-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-databind
Red Hat:rhel_aus:8.2::appstream / jackson-databind-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
Package
- Name
- jackson-databind-2.10.0-1.module+el8.2.0+5059+3eb3af25.src.rpm
- Purl
- pkg:rpm/redhat/jackson-databind
Red Hat:rhel_aus:8.2::appstream / jackson-jaxrs-json-provider-2.9.9-1.module+el8.1.0+3832+9784644d.noarch.rpm
Package
- Name
- jackson-jaxrs-json-provider-2.9.9-1.module+el8.1.0+3832+9784644d.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-json-provider
Red Hat:rhel_aus:8.2::appstream / jackson-jaxrs-providers-2.9.9-1.module+el8.1.0+3832+9784644d.noarch.rpm
Package
- Name
- jackson-jaxrs-providers-2.9.9-1.module+el8.1.0+3832+9784644d.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-providers
Red Hat:rhel_aus:8.2::appstream / jackson-jaxrs-providers-2.9.9-1.module+el8.1.0+3832+9784644d.src.rpm
Package
- Name
- jackson-jaxrs-providers-2.9.9-1.module+el8.1.0+3832+9784644d.src.rpm
- Purl
- pkg:rpm/redhat/jackson-jaxrs-providers
Red Hat:rhel_aus:8.2::appstream / jackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- jackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/jackson-module-jaxb-annotations
Red Hat:rhel_aus:8.2::appstream / jackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- jackson-module-jaxb-annotations-2.7.6-4.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/jackson-module-jaxb-annotations
Red Hat:rhel_aus:8.2::appstream / jakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- jakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/jakarta-commons-httpclient
Red Hat:rhel_aus:8.2::appstream / jakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- jakarta-commons-httpclient-3.1-28.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/jakarta-commons-httpclient
Red Hat:rhel_aus:8.2::appstream / javassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- javassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/javassist
Red Hat:rhel_aus:8.2::appstream / javassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- javassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/javassist
Red Hat:rhel_aus:8.2::appstream / javassist-javadoc-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- javassist-javadoc-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/javassist-javadoc
Red Hat:rhel_aus:8.2::appstream / pki-servlet-4.0-api-9.0.7-16.module+el8.2.0+22384+93cade87.1.noarch.rpm
Package
- Name
- pki-servlet-4.0-api-9.0.7-16.module+el8.2.0+22384+93cade87.1.noarch.rpm
- Purl
- pkg:rpm/redhat/pki-servlet-4.0-api
Red Hat:rhel_aus:8.2::appstream / pki-servlet-engine-9.0.7-16.module+el8.2.0+22384+93cade87.1.noarch.rpm
Package
- Name
- pki-servlet-engine-9.0.7-16.module+el8.2.0+22384+93cade87.1.noarch.rpm
- Purl
- pkg:rpm/redhat/pki-servlet-engine
Red Hat:rhel_aus:8.2::appstream / pki-servlet-engine-9.0.7-16.module+el8.2.0+22384+93cade87.1.src.rpm
Package
- Name
- pki-servlet-engine-9.0.7-16.module+el8.2.0+22384+93cade87.1.src.rpm
- Purl
- pkg:rpm/redhat/pki-servlet-engine
Red Hat:rhel_aus:8.2::appstream / python-nss-1.0.1-10.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- python-nss-1.0.1-10.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/python-nss
Red Hat:rhel_aus:8.2::appstream / python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
Package
- Name
- python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
- Purl
- pkg:rpm/redhat/python-nss-debugsource
Red Hat:rhel_aus:8.2::appstream / python-nss-doc-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
Package
- Name
- python-nss-doc-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
- Purl
- pkg:rpm/redhat/python-nss-doc
Red Hat:rhel_aus:8.2::appstream / python3-nss-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
Package
- Name
- python3-nss-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
- Purl
- pkg:rpm/redhat/python3-nss
Red Hat:rhel_aus:8.2::appstream / python3-nss-debuginfo-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
Package
- Name
- python3-nss-debuginfo-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
- Purl
- pkg:rpm/redhat/python3-nss-debuginfo
Red Hat:rhel_aus:8.2::appstream / relaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- relaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/relaxngDatatype
Red Hat:rhel_aus:8.2::appstream / relaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- relaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/relaxngDatatype
Red Hat:rhel_aus:8.2::appstream / resteasy-3.0.26-3.module+el8.2.0+5723+4574fbff.noarch.rpm
Package
- Name
- resteasy-3.0.26-3.module+el8.2.0+5723+4574fbff.noarch.rpm
- Purl
- pkg:rpm/redhat/resteasy
Red Hat:rhel_aus:8.2::appstream / resteasy-3.0.26-3.module+el8.2.0+5723+4574fbff.src.rpm
Package
- Name
- resteasy-3.0.26-3.module+el8.2.0+5723+4574fbff.src.rpm
- Purl
- pkg:rpm/redhat/resteasy
Red Hat:rhel_aus:8.2::appstream / slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/slf4j
Red Hat:rhel_aus:8.2::appstream / slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/slf4j
Red Hat:rhel_aus:8.2::appstream / slf4j-jdk14-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- slf4j-jdk14-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/slf4j-jdk14
Red Hat:rhel_aus:8.2::appstream / stax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.noarch.rpm
Package
- Name
- stax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.noarch.rpm
- Purl
- pkg:rpm/redhat/stax-ex
Red Hat:rhel_aus:8.2::appstream / stax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.src.rpm
Package
- Name
- stax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.src.rpm
- Purl
- pkg:rpm/redhat/stax-ex
Red Hat:rhel_aus:8.2::appstream / velocity-1.7-24.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- velocity-1.7-24.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/velocity
Red Hat:rhel_aus:8.2::appstream / velocity-1.7-24.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- velocity-1.7-24.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/velocity
Red Hat:rhel_aus:8.2::appstream / xalan-j2-2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- xalan-j2-2.7.1-38.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/xalan-j2
Red Hat:rhel_aus:8.2::appstream / xalan-j2-2.7.1-38.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- xalan-j2-2.7.1-38.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/xalan-j2
Red Hat:rhel_aus:8.2::appstream / xerces-j2-2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- xerces-j2-2.11.0-34.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/xerces-j2
Red Hat:rhel_aus:8.2::appstream / xerces-j2-2.11.0-34.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- xerces-j2-2.11.0-34.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/xerces-j2
Red Hat:rhel_aus:8.2::appstream / xml-commons-apis-1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- xml-commons-apis-1.4.01-25.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/xml-commons-apis
Red Hat:rhel_aus:8.2::appstream / xml-commons-apis-1.4.01-25.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- xml-commons-apis-1.4.01-25.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/xml-commons-apis
Red Hat:rhel_aus:8.2::appstream / xml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- xml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/xml-commons-resolver
Red Hat:rhel_aus:8.2::appstream / xml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.src.rpm
Package
- Name
- xml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.src.rpm
- Purl
- pkg:rpm/redhat/xml-commons-resolver
Red Hat:rhel_aus:8.2::appstream / xmlstreambuffer-1.5.4-8.module+el8.2.0+5723+4574fbff.noarch.rpm
Package
- Name
- xmlstreambuffer-1.5.4-8.module+el8.2.0+5723+4574fbff.noarch.rpm
- Purl
- pkg:rpm/redhat/xmlstreambuffer
Red Hat:rhel_aus:8.2::appstream / xmlstreambuffer-1.5.4-8.module+el8.2.0+5723+4574fbff.src.rpm
Package
- Name
- xmlstreambuffer-1.5.4-8.module+el8.2.0+5723+4574fbff.src.rpm
- Purl
- pkg:rpm/redhat/xmlstreambuffer
Red Hat:rhel_aus:8.2::appstream / xsom-0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch.rpm
Package
- Name
- xsom-0-19.20110809svn.module+el8.1.0+3366+6dfb954c.noarch.rpm
- Purl
- pkg:rpm/redhat/xsom