CVE-2019-12086: Infoleak
First published: Tue May 14 2019(Updated: )
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/eap7-activemq-artemis | <0:2.9.0-1.redhat_00005.1.el6ea | 0:2.9.0-1.redhat_00005.1.el6ea |
| redhat/eap7-codehaus-jackson | <0:1.9.13-9.redhat_00006.1.el6ea | 0:1.9.13-9.redhat_00006.1.el6ea |
| redhat/eap7-glassfish-jsf | <0:2.3.5-4.SP3_redhat_00002.1.el6ea | 0:2.3.5-4.SP3_redhat_00002.1.el6ea |
| redhat/eap7-hal-console | <0:3.0.16-1.Final_redhat_00001.1.el6ea | 0:3.0.16-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-hibernate | <0:5.3.11-2.SP1_redhat_00001.1.el6ea | 0:5.3.11-2.SP1_redhat_00001.1.el6ea |
| redhat/eap7-infinispan | <0:9.3.7-1.Final_redhat_00001.1.el6ea | 0:9.3.7-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-ironjacamar | <0:1.4.17-1.Final_redhat_00001.1.el6ea | 0:1.4.17-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jackson-annotations | <0:2.9.9-1.redhat_00001.1.el6ea | 0:2.9.9-1.redhat_00001.1.el6ea |
| redhat/eap7-jackson-core | <0:2.9.9-1.redhat_00001.1.el6ea | 0:2.9.9-1.redhat_00001.1.el6ea |
| redhat/eap7-jackson-databind | <0:2.9.9.3-1.redhat_00001.1.el6ea | 0:2.9.9.3-1.redhat_00001.1.el6ea |
| redhat/eap7-jackson-jaxrs-providers | <0:2.9.9-2.redhat_00001.1.el6ea | 0:2.9.9-2.redhat_00001.1.el6ea |
| redhat/eap7-jackson-modules-base | <0:2.9.9-1.redhat_00001.1.el6ea | 0:2.9.9-1.redhat_00001.1.el6ea |
| redhat/eap7-jackson-modules-java8 | <0:2.9.9-1.redhat_00001.1.el6ea | 0:2.9.9-1.redhat_00001.1.el6ea |
| redhat/eap7-jboss-ejb-client | <0:4.0.23-1.Final_redhat_00001.1.el6ea | 0:4.0.23-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-logging | <0:3.3.3-1.Final_redhat_00001.1.el6ea | 0:3.3.3-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-logmanager | <0:2.1.14-1.Final_redhat_00001.1.el6ea | 0:2.1.14-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-marshalling | <0:2.0.9-1.Final_redhat_00001.1.el6ea | 0:2.0.9-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-msc | <0:1.4.8-1.Final_redhat_00001.1.el6ea | 0:1.4.8-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jboss-remoting | <0:5.0.14-1.SP1_redhat_00001.1.el6ea | 0:5.0.14-1.SP1_redhat_00001.1.el6ea |
| redhat/eap7-jboss-server-migration | <0:1.3.1-4.Final_redhat_00004.1.el6ea | 0:1.3.1-4.Final_redhat_00004.1.el6ea |
| redhat/eap7-jboss-xnio-base | <0:3.7.3-1.Final_redhat_00001.1.el6ea | 0:3.7.3-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-jgroups | <0:4.0.20-1.Final_redhat_00001.1.el6ea | 0:4.0.20-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-narayana | <0:5.9.6-1.Final_redhat_00001.1.el6ea | 0:5.9.6-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-netty | <0:4.1.34-2.Final_redhat_00002.1.el6ea | 0:4.1.34-2.Final_redhat_00002.1.el6ea |
| redhat/eap7-picketbox | <0:5.0.3-5.Final_redhat_00004.1.el6ea | 0:5.0.3-5.Final_redhat_00004.1.el6ea |
| redhat/eap7-picketlink-bindings | <0:2.5.5-20.SP12_redhat_00007.1.el6ea | 0:2.5.5-20.SP12_redhat_00007.1.el6ea |
| redhat/eap7-picketlink-federation | <0:2.5.5-20.SP12_redhat_00007.1.el6ea | 0:2.5.5-20.SP12_redhat_00007.1.el6ea |
| redhat/eap7-undertow | <0:2.0.25-1.SP1_redhat_00001.1.el6ea | 0:2.0.25-1.SP1_redhat_00001.1.el6ea |
| redhat/eap7-weld-core | <0:3.0.6-2.Final_redhat_00002.1.el6ea | 0:3.0.6-2.Final_redhat_00002.1.el6ea |
| redhat/eap7-wildfly | <0:7.2.4-1.GA_redhat_00002.1.el6ea | 0:7.2.4-1.GA_redhat_00002.1.el6ea |
| redhat/eap7-wildfly-elytron | <0:1.6.4-1.Final_redhat_00001.1.el6ea | 0:1.6.4-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-wildfly-elytron-tool | <0:1.4.3-1.Final_redhat_00001.1.el6ea | 0:1.4.3-1.Final_redhat_00001.1.el6ea |
| redhat/eap7-wildfly-transaction-client | <0:1.1.6-2.Final_redhat_00001.1.el6ea | 0:1.1.6-2.Final_redhat_00001.1.el6ea |
| redhat/eap7-activemq-artemis | <0:2.9.0-1.redhat_00005.1.el7ea | 0:2.9.0-1.redhat_00005.1.el7ea |
| redhat/eap7-codehaus-jackson | <0:1.9.13-9.redhat_00006.1.el7ea | 0:1.9.13-9.redhat_00006.1.el7ea |
| redhat/eap7-glassfish-jsf | <0:2.3.5-4.SP3_redhat_00002.1.el7ea | 0:2.3.5-4.SP3_redhat_00002.1.el7ea |
| redhat/eap7-hal-console | <0:3.0.16-1.Final_redhat_00001.1.el7ea | 0:3.0.16-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-hibernate | <0:5.3.11-2.SP1_redhat_00001.1.el7ea | 0:5.3.11-2.SP1_redhat_00001.1.el7ea |
| redhat/eap7-infinispan | <0:9.3.7-1.Final_redhat_00001.1.el7ea | 0:9.3.7-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-ironjacamar | <0:1.4.17-1.Final_redhat_00001.1.el7ea | 0:1.4.17-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jackson-annotations | <0:2.9.9-1.redhat_00001.1.el7ea | 0:2.9.9-1.redhat_00001.1.el7ea |
| redhat/eap7-jackson-core | <0:2.9.9-1.redhat_00001.1.el7ea | 0:2.9.9-1.redhat_00001.1.el7ea |
| redhat/eap7-jackson-databind | <0:2.9.9.3-1.redhat_00001.1.el7ea | 0:2.9.9.3-1.redhat_00001.1.el7ea |
| redhat/eap7-jackson-jaxrs-providers | <0:2.9.9-2.redhat_00001.1.el7ea | 0:2.9.9-2.redhat_00001.1.el7ea |
| redhat/eap7-jackson-modules-base | <0:2.9.9-1.redhat_00001.1.el7ea | 0:2.9.9-1.redhat_00001.1.el7ea |
| redhat/eap7-jackson-modules-java8 | <0:2.9.9-1.redhat_00001.1.el7ea | 0:2.9.9-1.redhat_00001.1.el7ea |
| redhat/eap7-jboss-ejb-client | <0:4.0.23-1.Final_redhat_00001.1.el7ea | 0:4.0.23-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-logging | <0:3.3.3-1.Final_redhat_00001.1.el7ea | 0:3.3.3-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-logmanager | <0:2.1.14-1.Final_redhat_00001.1.el7ea | 0:2.1.14-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-marshalling | <0:2.0.9-1.Final_redhat_00001.1.el7ea | 0:2.0.9-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-msc | <0:1.4.8-1.Final_redhat_00001.1.el7ea | 0:1.4.8-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-remoting | <0:5.0.14-1.SP1_redhat_00001.1.el7ea | 0:5.0.14-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-jboss-server-migration | <0:1.3.1-4.Final_redhat_00004.1.el7ea | 0:1.3.1-4.Final_redhat_00004.1.el7ea |
| redhat/eap7-jboss-xnio-base | <0:3.7.3-1.Final_redhat_00001.1.el7ea | 0:3.7.3-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jgroups | <0:4.0.20-1.Final_redhat_00001.1.el7ea | 0:4.0.20-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-narayana | <0:5.9.6-1.Final_redhat_00001.1.el7ea | 0:5.9.6-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-netty | <0:4.1.34-2.Final_redhat_00002.1.el7ea | 0:4.1.34-2.Final_redhat_00002.1.el7ea |
| redhat/eap7-picketbox | <0:5.0.3-5.Final_redhat_00004.1.el7ea | 0:5.0.3-5.Final_redhat_00004.1.el7ea |
| redhat/eap7-picketlink-bindings | <0:2.5.5-20.SP12_redhat_00007.1.el7ea | 0:2.5.5-20.SP12_redhat_00007.1.el7ea |
| redhat/eap7-picketlink-federation | <0:2.5.5-20.SP12_redhat_00007.1.el7ea | 0:2.5.5-20.SP12_redhat_00007.1.el7ea |
| redhat/eap7-undertow | <0:2.0.25-1.SP1_redhat_00001.1.el7ea | 0:2.0.25-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-weld-core | <0:3.0.6-2.Final_redhat_00002.1.el7ea | 0:3.0.6-2.Final_redhat_00002.1.el7ea |
| redhat/eap7-wildfly | <0:7.2.4-1.GA_redhat_00002.1.el7ea | 0:7.2.4-1.GA_redhat_00002.1.el7ea |
| redhat/eap7-wildfly-elytron | <0:1.6.4-1.Final_redhat_00001.1.el7ea | 0:1.6.4-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-wildfly-elytron-tool | <0:1.4.3-1.Final_redhat_00001.1.el7ea | 0:1.4.3-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-wildfly-transaction-client | <0:1.1.6-2.Final_redhat_00001.1.el7ea | 0:1.1.6-2.Final_redhat_00001.1.el7ea |
| redhat/eap7-activemq-artemis | <0:2.9.0-1.redhat_00005.1.el8ea | 0:2.9.0-1.redhat_00005.1.el8ea |
| redhat/eap7-codehaus-jackson | <0:1.9.13-9.redhat_00006.1.el8ea | 0:1.9.13-9.redhat_00006.1.el8ea |
| redhat/eap7-glassfish-jsf | <0:2.3.5-4.SP3_redhat_00002.1.el8ea | 0:2.3.5-4.SP3_redhat_00002.1.el8ea |
| redhat/eap7-hal-console | <0:3.0.16-1.Final_redhat_00001.1.el8ea | 0:3.0.16-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-hibernate | <0:5.3.11-2.SP1_redhat_00001.1.el8ea | 0:5.3.11-2.SP1_redhat_00001.1.el8ea |
| redhat/eap7-infinispan | <0:9.3.7-1.Final_redhat_00001.1.el8ea | 0:9.3.7-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-ironjacamar | <0:1.4.17-1.Final_redhat_00001.1.el8ea | 0:1.4.17-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jackson-annotations | <0:2.9.9-1.redhat_00001.1.el8ea | 0:2.9.9-1.redhat_00001.1.el8ea |
| redhat/eap7-jackson-core | <0:2.9.9-1.redhat_00001.1.el8ea | 0:2.9.9-1.redhat_00001.1.el8ea |
| redhat/eap7-jackson-databind | <0:2.9.9.3-1.redhat_00001.1.el8ea | 0:2.9.9.3-1.redhat_00001.1.el8ea |
| redhat/eap7-jackson-jaxrs-providers | <0:2.9.9-2.redhat_00001.1.el8ea | 0:2.9.9-2.redhat_00001.1.el8ea |
| redhat/eap7-jackson-modules-base | <0:2.9.9-1.redhat_00001.1.el8ea | 0:2.9.9-1.redhat_00001.1.el8ea |
| redhat/eap7-jackson-modules-java8 | <0:2.9.9-1.redhat_00001.1.el8ea | 0:2.9.9-1.redhat_00001.1.el8ea |
| redhat/eap7-jboss-ejb-client | <0:4.0.23-1.Final_redhat_00001.1.el8ea | 0:4.0.23-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-logging | <0:3.3.3-1.Final_redhat_00001.1.el8ea | 0:3.3.3-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-logmanager | <0:2.1.14-1.Final_redhat_00001.1.el8ea | 0:2.1.14-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-marshalling | <0:2.0.9-1.Final_redhat_00001.1.el8ea | 0:2.0.9-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-msc | <0:1.4.8-1.Final_redhat_00001.1.el8ea | 0:1.4.8-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jboss-remoting | <0:5.0.14-1.SP1_redhat_00001.1.el8ea | 0:5.0.14-1.SP1_redhat_00001.1.el8ea |
| redhat/eap7-jboss-server-migration | <0:1.3.1-4.Final_redhat_00004.1.el8ea | 0:1.3.1-4.Final_redhat_00004.1.el8ea |
| redhat/eap7-jboss-xnio-base | <0:3.7.3-1.Final_redhat_00001.1.el8ea | 0:3.7.3-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-jgroups | <0:4.0.20-1.Final_redhat_00001.1.el8ea | 0:4.0.20-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-narayana | <0:5.9.6-1.Final_redhat_00001.1.el8ea | 0:5.9.6-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-netty | <0:4.1.34-2.Final_redhat_00002.1.el8ea | 0:4.1.34-2.Final_redhat_00002.1.el8ea |
| redhat/eap7-picketbox | <0:5.0.3-5.Final_redhat_00004.1.el8ea | 0:5.0.3-5.Final_redhat_00004.1.el8ea |
| redhat/eap7-picketlink-bindings | <0:2.5.5-20.SP12_redhat_00007.1.el8ea | 0:2.5.5-20.SP12_redhat_00007.1.el8ea |
| redhat/eap7-picketlink-federation | <0:2.5.5-20.SP12_redhat_00007.1.el8ea | 0:2.5.5-20.SP12_redhat_00007.1.el8ea |
| redhat/eap7-undertow | <0:2.0.25-1.SP1_redhat_00001.1.el8ea | 0:2.0.25-1.SP1_redhat_00001.1.el8ea |
| redhat/eap7-weld-core | <0:3.0.6-2.Final_redhat_00002.1.el8ea | 0:3.0.6-2.Final_redhat_00002.1.el8ea |
| redhat/eap7-wildfly | <0:7.2.4-1.GA_redhat_00002.1.el8ea | 0:7.2.4-1.GA_redhat_00002.1.el8ea |
| redhat/eap7-wildfly-elytron | <0:1.6.4-1.Final_redhat_00001.1.el8ea | 0:1.6.4-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-wildfly-elytron-tool | <0:1.4.3-1.Final_redhat_00001.1.el8ea | 0:1.4.3-1.Final_redhat_00001.1.el8ea |
| redhat/eap7-wildfly-transaction-client | <0:1.1.6-2.Final_redhat_00001.1.el8ea | 0:1.1.6-2.Final_redhat_00001.1.el8ea |
| redhat/candlepin | <0:2.6.16-1.el7 | 0:2.6.16-1.el7 |
| redhat/foreman | <0:1.22.0.39-2.el7 | 0:1.22.0.39-2.el7 |
| redhat/satellite | <0:6.6.3-1.el7 | 0:6.6.3-1.el7 |
| redhat/tfm-rubygem-fog-ovirt | <0:1.2.3-1.el7 | 0:1.2.3-1.el7 |
| redhat/tfm-rubygem-katello | <0:3.12.0.41-1.el7 | 0:3.12.0.41-1.el7 |
| redhat/tfm-rubygem-runcible | <0:2.13.0-1.el7 | 0:2.13.0-1.el7 |
| redhat/ansiblerole-insights-client | <0:1.7.1-1.el7 | 0:1.7.1-1.el7 |
| redhat/ansiblerole-satellite-receptor-installer | <0:0.6.4-1.el7 | 0:0.6.4-1.el7 |
| redhat/ansible-runner | <0:1.3.4-2.el7a | 0:1.3.4-2.el7a |
| redhat/candlepin | <0:2.9.25-1.el7 | 0:2.9.25-1.el7 |
| redhat/foreman | <0:1.24.1.21-1.el7 | 0:1.24.1.21-1.el7 |
| redhat/foreman-bootloaders-redhat | <0:201901011200-1.el7 | 0:201901011200-1.el7 |
| redhat/foreman-installer | <1:1.24.1.20-1.el7 | 1:1.24.1.20-1.el7 |
| redhat/foreman-proxy | <0:1.24.1-1.el7 | 0:1.24.1-1.el7 |
| redhat/foreman-selinux | <0:1.24.1-1.el7 | 0:1.24.1-1.el7 |
| redhat/future | <0:0.16.0-11.el7 | 0:0.16.0-11.el7 |
| redhat/gofer | <0:2.12.5-7.el7 | 0:2.12.5-7.el7 |
| redhat/hfsplus-tools | <0:332.14-12.el7 | 0:332.14-12.el7 |
| redhat/katello | <0:3.14.0-6.el7 | 0:3.14.0-6.el7 |
| redhat/katello-certs-tools | <0:2.6.0-1.el7 | 0:2.6.0-1.el7 |
| redhat/katello-client-bootstrap | <0:1.7.4-1.el7 | 0:1.7.4-1.el7 |
| redhat/katello-selinux | <0:3.1.1-2.el7 | 0:3.1.1-2.el7 |
| redhat/keycloak-httpd-client-install | <0:1.2.2-1.el7 | 0:1.2.2-1.el7 |
| redhat/kobo | <0:0.5.1-1.el7 | 0:0.5.1-1.el7 |
| redhat/libmodulemd | <0:1.7.0-1.pulp.el7 | 0:1.7.0-1.pulp.el7 |
| redhat/libsolv | <0:0.7.4-4.pulp.el7 | 0:0.7.4-4.pulp.el7 |
| redhat/libwebsockets | <0:2.4.2-2.el7 | 0:2.4.2-2.el7 |
| redhat/livecd-tools | <1:20.4-1.6.el7 | 1:20.4-1.6.el7 |
| redhat/ostree | <0:2017.1-2.atomic.el7 | 0:2017.1-2.atomic.el7 |
| redhat/pcp-mmvstatsd | <0:0.4-2.el7 | 0:0.4-2.el7 |
| redhat/pulp | <0:2.21.0-1.el7 | 0:2.21.0-1.el7 |
| redhat/pulp-docker | <0:3.2.5-1.el7 | 0:3.2.5-1.el7 |
| redhat/pulp-katello | <0:1.0.3-1.el7 | 0:1.0.3-1.el7 |
| redhat/pulp-ostree | <0:1.3.1-2.el7 | 0:1.3.1-2.el7 |
| redhat/pulp-puppet | <0:2.21.0-1.el7 | 0:2.21.0-1.el7 |
| redhat/pulp-rpm | <0:2.21.0.4-1.el7 | 0:2.21.0.4-1.el7 |
| redhat/puppet-agent | <0:5.5.17-1.el7 | 0:5.5.17-1.el7 |
| redhat/puppet-agent-oauth | <0:0.5.1-3.el7 | 0:0.5.1-3.el7 |
| redhat/puppetlabs-stdlib | <0:4.25.1-2.el7 | 0:4.25.1-2.el7 |
| redhat/puppetserver | <0:5.3.9-1.el7 | 0:5.3.9-1.el7 |
| redhat/pycairo | <0:1.16.3-9.el7 | 0:1.16.3-9.el7 |
| redhat/pygobject3 | <0:3.28.3-2.el7 | 0:3.28.3-2.el7 |
| redhat/python-aiohttp | <0:3.6.2-4.el7a | 0:3.6.2-4.el7a |
| redhat/python-amqp | <0:2.2.2-5.el7 | 0:2.2.2-5.el7 |
| redhat/python-anyjson | <0:0.3.3-11.el7 | 0:0.3.3-11.el7 |
| redhat/python-async-timeout | <0:3.0.1-2.el7a | 0:3.0.1-2.el7a |
| redhat/python-attrs | <0:19.3.0-3.el7a | 0:19.3.0-3.el7a |
| redhat/python-billiard | <1:3.5.0.3-3.el7 | 1:3.5.0.3-3.el7 |
| redhat/python-blinker | <0:1.3-2.el7 | 0:1.3-2.el7 |
| redhat/python-cchardet | <0:2.1.5-1.el7a | 0:2.1.5-1.el7a |
| redhat/python-celery | <0:4.0.2-9.el7 | 0:4.0.2-9.el7 |
| redhat/python-chardet | <0:3.0.4-10.el7a | 0:3.0.4-10.el7a |
| redhat/python-click | <0:6.7-9.el7 | 0:6.7-9.el7 |
| redhat/python-crane | <0:3.3.1-9.el7 | 0:3.3.1-9.el7 |
| redhat/python-daemon | <0:2.1.2-7.el7a | 0:2.1.2-7.el7a |
| redhat/python-dateutil | <0:2.8.1-2.el7a | 0:2.8.1-2.el7a |
| redhat/python-django | <0:1.11.13-1.el7 | 0:1.11.13-1.el7 |
| redhat/python-flask | <1:0.12.2-4.el7 | 1:0.12.2-4.el7 |
| redhat/python-gnupg | <0:0.3.7-1.el7 | 0:0.3.7-1.el7 |
| redhat/python-idna | <0:2.4-2.el7a | 0:2.4-2.el7a |
| redhat/python-idna-ssl | <0:1.1.0-2.el7a | 0:1.1.0-2.el7a |
| redhat/python-isodate | <0:0.5.4-12.el7 | 0:0.5.4-12.el7 |
| redhat/python-itsdangerous | <0:0.24-15.el7 | 0:0.24-15.el7 |
| redhat/python-jinja2 | <0:2.10-10.el7 | 0:2.10-10.el7 |
| redhat/python-jmespath | <0:0.9.0-6.el7_7 | 0:0.9.0-6.el7_7 |
| redhat/python-kid | <0:0.9.6-11.el7 | 0:0.9.6-11.el7 |
| redhat/python-kombu | <10:4.0.2-13.el7 | 10:4.0.2-13.el7 |
| redhat/python-lockfile | <1:0.11.0-10.el7a | 1:0.11.0-10.el7a |
| redhat/python-markupsafe | <0:0.23-21.el7 | 0:0.23-21.el7 |
| redhat/python-mongoengine | <0:0.10.5-2.el7 | 0:0.10.5-2.el7 |
| redhat/python-multidict | <0:4.7.4-2.el7a | 0:4.7.4-2.el7a |
| redhat/python-nectar | <0:1.6.1-2.el7 | 0:1.6.1-2.el7 |
| redhat/python-oauth2 | <0:1.5.211-8.el7 | 0:1.5.211-8.el7 |
| redhat/python-okaara | <0:1.0.37-2.el7 | 0:1.0.37-2.el7 |
| redhat/python-pexpect | <0:4.6-1.el7a | 0:4.6-1.el7a |
| redhat/python-prometheus-client | <0:0.7.1-2.el7a | 0:0.7.1-2.el7a |
| redhat/python-psutil | <0:5.0.1-3.el7 | 0:5.0.1-3.el7 |
| redhat/python-ptyprocess | <0:0.5.2-3.el7a | 0:0.5.2-3.el7a |
| redhat/python-pycurl | <0:7.43.0.2-4.el7 | 0:7.43.0.2-4.el7 |
| redhat/python-pymongo | <0:3.2-2.el7 | 0:3.2-2.el7 |
| redhat/python-qpid | <0:1.35.0-5.el7 | 0:1.35.0-5.el7 |
| redhat/python-receptor-satellite | <0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
| redhat/python-simplejson | <0:3.2.0-1.el7 | 0:3.2.0-1.el7 |
| redhat/python-six | <0:1.11.0-8.el7a | 0:1.11.0-8.el7a |
| redhat/python-twisted | <0:16.4.1-12.el7 | 0:16.4.1-12.el7 |
| redhat/python-typing-extensions | <0:3.7.4.1-2.el7a | 0:3.7.4.1-2.el7a |
| redhat/python-vine | <10:1.1.3-6.el7 | 10:1.1.3-6.el7 |
| redhat/python-werkzeug | <0:0.12.2-5.el7 | 0:0.12.2-5.el7 |
| redhat/python-yarl | <0:1.4.2-2.el7a | 0:1.4.2-2.el7a |
| redhat/python-zope-interface | <0:4.0.5-4.el7 | 0:4.0.5-4.el7 |
| redhat/qpid-cpp | <0:1.36.0-28.el7a | 0:1.36.0-28.el7a |
| redhat/qpid-dispatch | <0:1.5.0-4.el7 | 0:1.5.0-4.el7 |
| redhat/qpid-proton | <0:0.28.0-2.el7 | 0:0.28.0-2.el7 |
| redhat/receptor | <0:0.6.1-1.el7a | 0:0.6.1-1.el7a |
| redhat/redhat-access-insights-puppet | <0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
| redhat/repoview | <0:0.6.6-11.el7 | 0:0.6.6-11.el7 |
| redhat/rhel8-kickstart-setup | <0:0.0.2-1.el7 | 0:0.0.2-1.el7 |
| redhat/rubygem-ansi | <0:1.4.3-3.el7 | 0:1.4.3-3.el7 |
| redhat/rubygem-clamp | <0:1.1.2-2.el7 | 0:1.1.2-2.el7 |
| redhat/rubygem-concurrent-ruby | <1:1.1.4-2.el7 | 1:1.1.4-2.el7 |
| redhat/rubygem-facter | <0:2.4.1-2.el7 | 0:2.4.1-2.el7 |
| redhat/rubygem-faraday | <0:0.15.4-1.el7 | 0:0.15.4-1.el7 |
| redhat/rubygem-ffi | <0:1.4.0-3.el7 | 0:1.4.0-3.el7 |
| redhat/rubygem-gssapi | <0:1.1.2-4.el7 | 0:1.1.2-4.el7 |
| redhat/rubygem-hashie | <0:2.0.5-5.el7 | 0:2.0.5-5.el7 |
| redhat/rubygem-highline | <0:1.7.8-3.el7 | 0:1.7.8-3.el7 |
| redhat/rubygem-infoblox | <0:3.0.0-1.el7 | 0:3.0.0-1.el7 |
| redhat/rubygem-journald-logger | <0:2.0.4-2.el7 | 0:2.0.4-2.el7 |
| redhat/rubygem-journald-native | <0:1.0.11-2.el7 | 0:1.0.11-2.el7 |
| redhat/rubygem-jwt | <0:1.2.1-1.el7 | 0:1.2.1-1.el7 |
| redhat/rubygem-kafo | <0:4.0.1-1.el7 | 0:4.0.1-1.el7 |
| redhat/rubygem-little-plugger | <0:1.1.3-22.el7 | 0:1.1.3-22.el7 |
| redhat/rubygem-logging | <0:2.2.2-4.el7 | 0:2.2.2-4.el7 |
| redhat/rubygem-logging-journald | <0:2.0.0-2.el7 | 0:2.0.0-2.el7 |
| redhat/rubygem-mime-types | <0:1.19-7.el7 | 0:1.19-7.el7 |
| redhat/rubygem-multipart-post | <0:2.0.0-1.el7 | 0:2.0.0-1.el7 |
| redhat/rubygem-netrc | <0:0.7.7-9.el7 | 0:0.7.7-9.el7 |
| redhat/rubygem-net-ssh | <0:4.2.0-1.el7 | 0:4.2.0-1.el7 |
| redhat/rubygem-newt | <0:0.9.6-3.el7 | 0:0.9.6-3.el7 |
| redhat/rubygem-oauth | <0:0.5.4-2.el7 | 0:0.5.4-2.el7 |
| redhat/rubygem-openscap | <0:0.4.7-2.el7 | 0:0.4.7-2.el7 |
| redhat/rubygem-passenger | <0:4.0.18-24.el7 | 0:4.0.18-24.el7 |
| redhat/rubygem-powerbar | <0:2.0.1-2.el7 | 0:2.0.1-2.el7 |
| redhat/rubygem-rack | <1:1.6.4-3.el7 | 1:1.6.4-3.el7 |
| redhat/rubygem-rack-protection | <0:1.5.3-4.el7 | 0:1.5.3-4.el7 |
| redhat/rubygem-rake | <0:0.9.2.2-41.el7 | 0:0.9.2.2-41.el7 |
| redhat/rubygem-rb-inotify | <0:0.9.7-2.el7 | 0:0.9.7-2.el7 |
| redhat/rubygem-rest-client | <0:1.6.7-7.el7 | 0:1.6.7-7.el7 |
| redhat/rubygem-rkerberos | <0:0.1.5-15.el7 | 0:0.1.5-15.el7 |
| redhat/rubygem-rsec | <0:0.4.3-2.el7 | 0:0.4.3-2.el7 |
| redhat/rubygem-rubyipmi | <0:0.10.0-4.el7 | 0:0.10.0-4.el7 |
| redhat/rubygem-sinatra | <1:1.4.7-3.el7 | 1:1.4.7-3.el7 |
| redhat/rubygem-tilt | <0:1.3.7-2.git.0.3b416c9.el7 | 0:1.3.7-2.git.0.3b416c9.el7 |
| redhat/saslwrapper | <0:0.22-5.el7 | 0:0.22-5.el7 |
| redhat/satellite | <0:6.7.0-7.el7 | 0:6.7.0-7.el7 |
| redhat/satellite-installer | <0:6.7.0.8-1.el7 | 0:6.7.0.8-1.el7 |
| redhat/tfm | <0:5.0-9.el7 | 0:5.0-9.el7 |
| redhat/tfm-ror52 | <0:1.0-4.el7 | 0:1.0-4.el7 |
| redhat/tfm-ror52-rubygem-actioncable | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-actionmailer | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-actionpack | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-actionview | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-activejob | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-activemodel | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-activerecord | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-activestorage | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-activesupport | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-arel | <0:9.0.0-1.el7 | 0:9.0.0-1.el7 |
| redhat/tfm-ror52-rubygem-builder | <0:3.2.3-1.el7 | 0:3.2.3-1.el7 |
| redhat/tfm-ror52-rubygem-coffee-rails | <0:4.2.2-1.el7 | 0:4.2.2-1.el7 |
| redhat/tfm-ror52-rubygem-coffee-script | <0:2.4.1-1.el7 | 0:2.4.1-1.el7 |
| redhat/tfm-ror52-rubygem-coffee-script-source | <0:1.12.2-1.el7 | 0:1.12.2-1.el7 |
| redhat/tfm-ror52-rubygem-concurrent-ruby | <0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
| redhat/tfm-ror52-rubygem-crass | <0:1.0.4-1.el7 | 0:1.0.4-1.el7 |
| redhat/tfm-ror52-rubygem-erubi | <0:1.7.1-1.el7 | 0:1.7.1-1.el7 |
| redhat/tfm-ror52-rubygem-execjs | <0:2.7.0-1.el7 | 0:2.7.0-1.el7 |
| redhat/tfm-ror52-rubygem-globalid | <0:0.4.1-3.el7 | 0:0.4.1-3.el7 |
| redhat/tfm-ror52-rubygem-i18n | <0:1.4.0-1.el7 | 0:1.4.0-1.el7 |
| redhat/tfm-ror52-rubygem-loofah | <0:2.2.2-2.el7 | 0:2.2.2-2.el7 |
| redhat/tfm-ror52-rubygem-mail | <0:2.7.0-1.el7 | 0:2.7.0-1.el7 |
| redhat/tfm-ror52-rubygem-marcel | <0:0.3.2-1.el7 | 0:0.3.2-1.el7 |
| redhat/tfm-ror52-rubygem-mimemagic | <0:0.3.2-1.el7 | 0:0.3.2-1.el7 |
| redhat/tfm-ror52-rubygem-mime-types | <0:3.2.2-1.el7 | 0:3.2.2-1.el7 |
| redhat/tfm-ror52-rubygem-mime-types-data | <0:3.2018.0812-1.el7 | 0:3.2018.0812-1.el7 |
| redhat/tfm-ror52-rubygem-mustermann | <0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
| redhat/tfm-ror52-rubygem-nio4r | <0:2.3.1-1.el7 | 0:2.3.1-1.el7 |
| redhat/tfm-ror52-rubygem-nokogiri | <0:1.8.4-2.el7 | 0:1.8.4-2.el7 |
| redhat/tfm-ror52-rubygem-rack | <0:2.0.6-1.el7 | 0:2.0.6-1.el7 |
| redhat/tfm-ror52-rubygem-rack-protection | <0:2.0.3-1.el7 | 0:2.0.3-1.el7 |
| redhat/tfm-ror52-rubygem-rack-test | <0:1.1.0-1.el7 | 0:1.1.0-1.el7 |
| redhat/tfm-ror52-rubygem-rails | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-rails-dom-testing | <0:2.0.3-3.el7 | 0:2.0.3-3.el7 |
| redhat/tfm-ror52-rubygem-rails-html-sanitizer | <0:1.0.4-2.el7 | 0:1.0.4-2.el7 |
| redhat/tfm-ror52-rubygem-railties | <0:5.2.1-1.el7 | 0:5.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-sinatra | <0:2.0.3-1.el7 | 0:2.0.3-1.el7 |
| redhat/tfm-ror52-rubygem-sprockets | <0:3.7.2-3.el7 | 0:3.7.2-3.el7 |
| redhat/tfm-ror52-rubygem-sprockets-rails | <0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
| redhat/tfm-ror52-rubygem-sqlite3 | <0:1.3.13-1.el7 | 0:1.3.13-1.el7 |
| redhat/tfm-ror52-rubygem-thor | <0:0.20.0-3.el7 | 0:0.20.0-3.el7 |
| redhat/tfm-ror52-rubygem-tilt | <0:2.0.8-1.el7 | 0:2.0.8-1.el7 |
| redhat/tfm-ror52-rubygem-turbolinks | <0:2.5.4-1.el7 | 0:2.5.4-1.el7 |
| redhat/tfm-ror52-rubygem-tzinfo | <0:1.2.5-1.el7 | 0:1.2.5-1.el7 |
| redhat/tfm-ror52-rubygem-websocket-driver | <0:0.7.0-1.el7 | 0:0.7.0-1.el7 |
| redhat/tfm-ror52-rubygem-websocket-extensions | <0:0.1.3-1.el7 | 0:0.1.3-1.el7 |
| redhat/tfm-rubygem-activerecord-import | <0:1.0.0-4.el7 | 0:1.0.0-4.el7 |
| redhat/tfm-rubygem-addressable | <0:2.6.0-1.el7 | 0:2.6.0-1.el7 |
| redhat/tfm-rubygem-algebrick | <0:0.7.3-6.el7 | 0:0.7.3-6.el7 |
| redhat/tfm-rubygem-ancestry | <0:3.0.0-3.el7 | 0:3.0.0-3.el7 |
| redhat/tfm-rubygem-anemone | <0:0.7.2-20.el7 | 0:0.7.2-20.el7 |
| redhat/tfm-rubygem-angular-rails-templates | <1:1.0.2-4.el7 | 1:1.0.2-4.el7 |
| redhat/tfm-rubygem-apipie-bindings | <0:0.3.0-1.el7 | 0:0.3.0-1.el7 |
| redhat/tfm-rubygem-apipie-params | <0:0.0.5-5.el7 | 0:0.0.5-5.el7 |
| redhat/tfm-rubygem-apipie-rails | <0:0.5.14-1.el7 | 0:0.5.14-1.el7 |
| redhat/tfm-rubygem-audited | <0:4.9.0-1.el7 | 0:4.9.0-1.el7 |
| redhat/tfm-rubygem-bcrypt | <0:3.1.12-1.el7 | 0:3.1.12-1.el7 |
| redhat/tfm-rubygem-clamp | <0:1.1.2-5.el7 | 0:1.1.2-5.el7 |
| redhat/tfm-rubygem-concurrent-ruby-edge | <1:0.4.1-1.el7 | 1:0.4.1-1.el7 |
| redhat/tfm-rubygem-daemons | <0:1.2.3-7.el7 | 0:1.2.3-7.el7 |
| redhat/tfm-rubygem-deacon | <0:1.0.0-4.el7 | 0:1.0.0-4.el7 |
| redhat/tfm-rubygem-declarative | <0:0.0.10-1.el7 | 0:0.0.10-1.el7 |
| redhat/tfm-rubygem-declarative-option | <0:0.1.0-1.el7 | 0:0.1.0-1.el7 |
| redhat/tfm-rubygem-deface | <0:1.5.3-1.el7 | 0:1.5.3-1.el7 |
| redhat/tfm-rubygem-diffy | <0:3.0.1-6.el7 | 0:3.0.1-6.el7 |
| redhat/tfm-rubygem-dynflow | <0:1.4.1-2.el7 | 0:1.4.1-2.el7 |
| redhat/tfm-rubygem-ethon | <0:0.12.0-1.el7 | 0:0.12.0-1.el7 |
| redhat/tfm-rubygem-excon | <0:0.58.0-3.el7 | 0:0.58.0-3.el7 |
| redhat/tfm-rubygem-facter | <0:2.4.0-6.el7 | 0:2.4.0-6.el7 |
| redhat/tfm-rubygem-faraday | <0:0.15.4-1.el7 | 0:0.15.4-1.el7 |
| redhat/tfm-rubygem-ffi | <0:1.4.0-12.el7 | 0:1.4.0-12.el7 |
| redhat/tfm-rubygem-fog-aws | <0:3.5.0-1.el7 | 0:3.5.0-1.el7 |
| redhat/tfm-rubygem-fog-core | <0:2.1.0-1.el7 | 0:2.1.0-1.el7 |
| redhat/tfm-rubygem-fog-google | <0:1.8.2-1.el7 | 0:1.8.2-1.el7 |
| redhat/tfm-rubygem-fog-json | <0:1.2.0-1.el7 | 0:1.2.0-1.el7 |
| redhat/tfm-rubygem-fog-kubevirt | <0:1.3.3-1.el7 | 0:1.3.3-1.el7 |
| redhat/tfm-rubygem-fog-libvirt | <0:0.7.0-1.el7 | 0:0.7.0-1.el7 |
| redhat/tfm-rubygem-fog-openstack | <0:1.0.8-2.el7 | 0:1.0.8-2.el7 |
| redhat/tfm-rubygem-fog-ovirt | <0:1.2.4-1.el7 | 0:1.2.4-1.el7 |
| redhat/tfm-rubygem-fog-rackspace | <0:0.1.4-3.el7 | 0:0.1.4-3.el7 |
| redhat/tfm-rubygem-fog-vsphere | <0:3.2.1-1.el7 | 0:3.2.1-1.el7 |
| redhat/tfm-rubygem-fog-xml | <0:0.1.2-7.el7 | 0:0.1.2-7.el7 |
| redhat/tfm-rubygem-foreman-tasks | <0:0.17.5.2-1.el7 | 0:0.17.5.2-1.el7 |
| redhat/tfm-rubygem-foreman-tasks-core | <0:0.3.3-1.el7 | 0:0.3.3-1.el7 |
| redhat/tfm-rubygem-formatador | <0:0.2.1-11.el7 | 0:0.2.1-11.el7 |
| redhat/tfm-rubygem-gettext | <0:3.1.4-10.el7 | 0:3.1.4-10.el7 |
| redhat/tfm-rubygem-git | <0:1.5.0-1.el7 | 0:1.5.0-1.el7 |
| redhat/tfm-rubygem-google-api-client | <0:0.23.9-1.el7 | 0:0.23.9-1.el7 |
| redhat/tfm-rubygem-googleauth | <0:0.6.7-1.el7 | 0:0.6.7-1.el7 |
| redhat/tfm-rubygem-graphql | <0:1.8.14-1.el7 | 0:1.8.14-1.el7 |
| redhat/tfm-rubygem-graphql-batch | <0:0.3.10-1.el7 | 0:0.3.10-1.el7 |
| redhat/tfm-rubygem-gssapi | <0:1.2.0-6.el7 | 0:1.2.0-6.el7 |
| redhat/tfm-rubygem-hashie | <0:3.6.0-1.el7 | 0:3.6.0-1.el7 |
| redhat/tfm-rubygem-highline | <0:1.7.8-4.el7 | 0:1.7.8-4.el7 |
| redhat/tfm-rubygem-http | <0:3.3.0-1.el7 | 0:3.3.0-1.el7 |
| redhat/tfm-rubygem-httpclient | <0:2.8.3-1.el7 | 0:2.8.3-1.el7 |
| redhat/tfm-rubygem-http-cookie | <0:1.0.2-5.el7 | 0:1.0.2-5.el7 |
| redhat/tfm-rubygem-ipaddress | <0:0.8.0-11.el7 | 0:0.8.0-11.el7 |
| redhat/tfm-rubygem-jgrep | <0:1.3.3-12.el7 | 0:1.3.3-12.el7 |
| redhat/tfm-rubygem-journald-logger | <0:2.0.4-2.el7 | 0:2.0.4-2.el7 |
| redhat/tfm-rubygem-journald-native | <0:1.0.11-2.el7 | 0:1.0.11-2.el7 |
| redhat/tfm-rubygem-jwt | <0:2.2.1-1.el7 | 0:2.2.1-1.el7 |
| redhat/tfm-rubygem-katello | <0:3.14.0.20-1.el7 | 0:3.14.0.20-1.el7 |
| redhat/tfm-rubygem-kubeclient | <0:4.3.0-1.el7 | 0:4.3.0-1.el7 |
| redhat/tfm-rubygem-little-plugger | <0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
| redhat/tfm-rubygem-locale | <0:2.0.9-13.el7 | 0:2.0.9-13.el7 |
| redhat/tfm-rubygem-logging | <0:2.2.2-5.el7 | 0:2.2.2-5.el7 |
| redhat/tfm-rubygem-logging-journald | <0:2.0.0-2.el7 | 0:2.0.0-2.el7 |
| redhat/tfm-rubygem-memoist | <0:0.16.0-1.el7 | 0:0.16.0-1.el7 |
| redhat/tfm-rubygem-multipart-post | <0:2.0.0-1.el7 | 0:2.0.0-1.el7 |
| redhat/tfm-rubygem-net-ldap | <0:0.16.1-1.el7 | 0:0.16.1-1.el7 |
| redhat/tfm-rubygem-net-ping | <0:2.0.1-3.el7 | 0:2.0.1-3.el7 |
| redhat/tfm-rubygem-netrc | <0:0.11.0-3.el7 | 0:0.11.0-3.el7 |
| redhat/tfm-rubygem-net-scp | <0:1.2.1-3.el7 | 0:1.2.1-3.el7 |
| redhat/tfm-rubygem-net-ssh | <0:4.2.0-1.el7 | 0:4.2.0-1.el7 |
| redhat/tfm-rubygem-net-ssh-krb | <0:0.4.0-3.el7 | 0:0.4.0-3.el7 |
| redhat/tfm-rubygem-oauth | <0:0.5.4-3.el7 | 0:0.5.4-3.el7 |
| redhat/tfm-rubygem-optimist | <0:3.0.0-1.el7 | 0:3.0.0-1.el7 |
| redhat/tfm-rubygem-os | <0:1.0.0-1.el7 | 0:1.0.0-1.el7 |
| redhat/tfm-rubygem-ovirt-engine-sdk | <0:4.2.3-3.el7 | 0:4.2.3-3.el7 |
| redhat/tfm-rubygem-parse-cron | <0:0.1.4-4.el7 | 0:0.1.4-4.el7 |
| redhat/tfm-rubygem-passenger | <0:4.0.18-10.12.el7 | 0:4.0.18-10.12.el7 |
| redhat/tfm-rubygem-pg | <0:0.21.0-3.el7 | 0:0.21.0-3.el7 |
| redhat/tfm-rubygem-polyglot | <0:0.3.5-3.el7 | 0:0.3.5-3.el7 |
| redhat/tfm-rubygem-powerbar | <0:2.0.1-2.el7 | 0:2.0.1-2.el7 |
| redhat/tfm-rubygem-prometheus-client | <0:1.0.0-1.el7 | 0:1.0.0-1.el7 |
| redhat/tfm-rubygem-promise.rb | <0:0.7.4-1.el7 | 0:0.7.4-1.el7 |
| redhat/tfm-rubygem-quantile | <0:0.2.0-3.el7 | 0:0.2.0-3.el7 |
| redhat/tfm-rubygem-rabl | <0:0.13.1-2.el7 | 0:0.13.1-2.el7 |
| redhat/tfm-rubygem-rack-cors | <0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
| redhat/tfm-rubygem-rack-jsonp | <0:1.3.1-7.el7 | 0:1.3.1-7.el7 |
| redhat/tfm-rubygem-rails-i18n | <0:5.1.1-2.el7 | 0:5.1.1-2.el7 |
| redhat/tfm-rubygem-rainbow | <0:2.2.1-5.el7 | 0:2.2.1-5.el7 |
| redhat/tfm-rubygem-rbovirt | <0:0.1.7-2.el7 | 0:0.1.7-2.el7 |
| redhat/tfm-rubygem-rbvmomi | <0:2.2.0-1.el7 | 0:2.2.0-1.el7 |
| redhat/tfm-rubygem-recursive-open-struct | <0:1.1.0-1.el7 | 0:1.1.0-1.el7 |
| redhat/tfm-rubygem-representable | <0:3.0.4-1.el7 | 0:3.0.4-1.el7 |
| redhat/tfm-rubygem-responders | <0:3.0.0-1.el7 | 0:3.0.0-1.el7 |
| redhat/tfm-rubygem-rest-client | <0:2.0.2-1.el7 | 0:2.0.2-1.el7 |
| redhat/tfm-rubygem-retriable | <0:3.1.2-1.el7 | 0:3.1.2-1.el7 |
| redhat/tfm-rubygem-roadie | <0:3.4.0-1.el7 | 0:3.4.0-1.el7 |
| redhat/tfm-rubygem-roadie-rails | <0:2.0.0-1.el7 | 0:2.0.0-1.el7 |
| redhat/tfm-rubygem-robotex | <0:1.0.0-21.el7 | 0:1.0.0-21.el7 |
| redhat/tfm-rubygem-ruby2ruby | <0:2.4.2-1.el7 | 0:2.4.2-1.el7 |
| redhat/tfm-rubygem-ruby-libvirt | <0:0.7.0-4.el7 | 0:0.7.0-4.el7 |
| redhat/tfm-rubygem-safemode | <0:1.3.5-2.el7 | 0:1.3.5-2.el7 |
| redhat/tfm-rubygem-sequel | <0:5.7.1-2.el7 | 0:5.7.1-2.el7 |
| redhat/tfm-rubygem-signet | <0:0.11.0-1.el7 | 0:0.11.0-1.el7 |
| redhat/tfm-rubygem-sshkey | <0:1.9.0-3.el7 | 0:1.9.0-3.el7 |
| redhat/tfm-rubygem-statsd-instrument | <0:2.1.4-2.el7 | 0:2.1.4-2.el7 |
| redhat/tfm-rubygem-text | <0:1.3.0-7.el7 | 0:1.3.0-7.el7 |
| redhat/tfm-rubygem-timeliness | <0:0.3.10-1.el7 | 0:0.3.10-1.el7 |
| redhat/tfm-rubygem-typhoeus | <0:1.3.1-1.el7 | 0:1.3.1-1.el7 |
| redhat/tfm-rubygem-uber | <0:0.1.0-1.el7 | 0:0.1.0-1.el7 |
| redhat/tfm-rubygem-unf | <0:0.1.3-7.el7 | 0:0.1.3-7.el7 |
| redhat/tfm-rubygem-unicode | <0:0.4.4.4-1.el7 | 0:0.4.4.4-1.el7 |
| redhat/tfm-rubygem-webpack-rails | <0:0.9.8-5.el7 | 0:0.9.8-5.el7 |
| redhat/tfm-rubygem-x-editable-rails | <0:1.5.5-4.el7 | 0:1.5.5-4.el7 |
| redhat/rh-sso7-keycloak | <0:4.8.13-1.Final_redhat_00001.1.el6 | 0:4.8.13-1.Final_redhat_00001.1.el6 |
| redhat/rh-sso7-keycloak | <0:4.8.13-1.Final_redhat_00001.1.el7 | 0:4.8.13-1.Final_redhat_00001.1.el7 |
| redhat/rh-sso7-libunix-dbus-java | <0:0.8.0-2.el7 | 0:0.8.0-2.el7 |
| redhat/rh-sso7-keycloak | <0:4.8.13-1.Final_redhat_00001.1.el8 | 0:4.8.13-1.Final_redhat_00001.1.el8 |
| debian/jackson-databind | 2.9.8-3+deb10u3 2.9.8-3+deb10u5 2.12.1-1+deb11u1 2.14.0-1 | |
| redhat/jackson-databind | <2.9.9 | 2.9.9 |
| maven/com.fasterxml.jackson.core:jackson-databind | >=2.0.0<2.6.7.3 | 2.6.7.3 |
| maven/com.fasterxml.jackson.core:jackson-databind | >=2.7.0<2.7.9.6 | 2.7.9.6 |
| maven/com.fasterxml.jackson.core:jackson-databind | >=2.8.0<2.8.11.4 | 2.8.11.4 |
| maven/com.fasterxml.jackson.core:jackson-databind | >=2.9.0<2.9.9 | 2.9.9 |
| FasterXML Jackson Databind | >=2.0.0<2.6.7.3 | |
| FasterXML Jackson Databind | >=2.7.0<2.7.9.6 | |
| FasterXML Jackson Databind | >=2.8.0<2.8.11.4 | |
| FasterXML Jackson Databind | >=2.9.0<2.9.9 | |
| Debian Linux | =8.0 | |
| Debian Linux | =9.0 | |
| IBM Global Data Engine | <=3.0.0.2 |
Remedy
The following conditions are needed for an exploit, we recommend avoiding all if possible * Deserialization from sources you do not control * `enableDefaultTyping()` * `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://russiansecurity.expert/2016/04/20/mysql-connect-file-read/
- http://www.securityfocus.com/bid/109227
- https://access.redhat.com/errata/RHSA-2019:2858
- https://access.redhat.com/errata/RHSA-2019:2935
- https://access.redhat.com/errata/RHSA-2019:2936
- https://access.redhat.com/errata/RHSA-2019:2937
- https://access.redhat.com/errata/RHSA-2019:2938
- https://access.redhat.com/errata/RHSA-2019:2998
- https://access.redhat.com/errata/RHSA-2019:3044
- https://access.redhat.com/errata/RHSA-2019:3045
- https://access.redhat.com/errata/RHSA-2019:3046
- https://access.redhat.com/errata/RHSA-2019:3050
- https://access.redhat.com/errata/RHSA-2019:3149
- https://access.redhat.com/errata/RHSA-2019:3200
- https://github.com/FasterXML/jackson-databind/issues/2326
- https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9
- https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592@%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/88cd25375805950ae7337e669b0cb0eeda98b9604c1b8d806dccbad2@%3Creviews.spark.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
- https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679@%3Ccommits.nifi.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2019/05/msg00030.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://seclists.org/bugtraq/2019/May/68
- https://security.netapp.com/advisory/ntap-20190530-0003/
- https://www.debian.org/security/2019/dsa-4452
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://www.cve.org/CVERecord?id=CVE-2019-12086 https://nvd.nist.gov/vuln/detail/CVE-2019-12086
- https://bugzilla.redhat.com/show_bug.cgi?id=1713468
- https://access.redhat.com/errata/RHBA-2019:3416
- https://access.redhat.com/errata/RHSA-2020:3192
- https://access.redhat.com/errata/RHBA-2020:1494
- https://access.redhat.com/errata/RHSA-2020:1454
- https://access.redhat.com/security/cve/CVE-2019-12086
- https://github.com/FasterXML/jackson-databind/commit/dda513bd7251b4f32b7b60b1c13740e3b5a43024
- https://security-tracker.debian.org/tracker/CVE-2019-12086
- https://issues.jboss.org/browse/RESTEASY-2248
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1713469
- https://access.redhat.com/support/policy/updates/rhmap
- https://access.redhat.com/support/policy/updates/jboss_notes
- https://access.redhat.com/security/cve/cve-2019-12086
- https://nvd.nist.gov/vuln/detail/CVE-2019-12086
- https://web.archive.org/web/20200227030031/http://www.securityfocus.com/bid/109227
- https://github.com/FasterXML/jackson-databind/commit/efc3c0d02f4743dbaa6d1b9c466772a2f13d966b
- https://github.com/FasterXML/jackson-databind/commit/d30f036208ab1c60bd5ce429cb4f7f1a3e5682e8
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC
- https://security.netapp.com/advisory/ntap-20190530-0003
- https://web.archive.org/web/20200808181049/http://russiansecurity.expert/2016/04/20/mysql-connect-file-read
- https://github.com/advisories/GHSA-5ww9-j83m-q7qx (Advisory)
- https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592%40%3Ccommits.cassandra.apache.org%3E
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/88cd25375805950ae7337e669b0cb0eeda98b9604c1b8d806dccbad2%40%3Creviews.spark.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E
- https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/
- https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/161256
- https://www.ibm.com/support/pages/node/6320835 (Advisory)
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is the severity of CVE-2019-12086?
CVE-2019-12086 has a severity rating of critical, as it could lead to remote code execution under certain configurations.
How do I fix CVE-2019-12086?
To remediate CVE-2019-12086, update the jackson-databind library to version 2.9.9 or later.
What versions are affected by CVE-2019-12086?
CVE-2019-12086 affects FasterXML jackson-databind versions prior to 2.9.9.
Is CVE-2019-12086 a local or remote vulnerability?
CVE-2019-12086 is a remote vulnerability that can be exploited over the network.
What configurations make CVE-2019-12086 exploitable?
CVE-2019-12086 is exploitable when default typing is enabled and the affected service has the mysql-connector-java jar in its classpath.
- collector/redhat-cve
- collector/security-tracker-debian
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-12086
- agent/software-canonical-lookup
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-5ww9-j83m-q7qx
- collector/github-advisory
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/ibm-support
- source/IBM
- package-manager/redhat
- package-manager/debian
- package-manager/maven
- vendor/fasterxml
- canonical/fasterxml jackson databind
- version/fasterxml jackson databind/2.0.0
- version/fasterxml jackson databind/2.7.0
- version/fasterxml jackson databind/2.8.0
- version/fasterxml jackson databind/2.9.0
- vendor/debian
- canonical/debian linux
- version/debian linux/8.0
- version/debian linux/9.0
- vendor/ibm
- canonical/ibm global data engine
- version/ibm global data engine/3.0.0.2