critique
CVE-2019-16943
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Le label propre à Trivy est CRITICAL. Critique selon NVD, GHSA. Plus basse selon Red Hat (moyenne), AlmaLinux (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne).
Description
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections, pki-deps:10.6::apache-commons-lang, pki-deps:10.6::bea-stax-api et 25 autres | 3.2.2-10.module_el8.5.0+2577+9e95fe00 et 20 autres |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections, apache-commons-lang, bea-stax-api et 43 autres | 3.2.2-10.module+el8.2.0+5508+146760da et 27 autres |
| Red Hat | elasticsearch-cloud-kubernetes, opendaylight, openshift-elasticsearch-plugin et 2 autres | pas de correctif indiqué |
Afficher les 121 entrées de 14 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::velocity | 1.7-24.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-core | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-runtime | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-txw2 | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-annotations | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-core | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-databind | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-json-provider | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist-javadoc | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jss | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | jss-javadoc | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk-javadoc | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base-java | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-ca | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-kra | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-server | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-servlet-4.0-api | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-servlet-engine | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-symkey | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-tools | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | python-nss-doc | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-nss | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-pki | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j-jdk14 | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | tomcatjss | 7.4.1-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.2.0+5508+146760da |
| Red Hat | elasticsearch-cloud-kubernetes | pas de correctif indiqué |
| Red Hat | opendaylight | pas de correctif indiqué |
| Red Hat | openshift-elasticsearch-plugin | pas de correctif indiqué |
| Red Hat | rh-maven35-jackson-databind | pas de correctif indiqué |
| Red Hat | rh-maven35-jackson-databind-javadoc | pas de correctif indiqué |
| rocky 8 | maven:3.5::slf4j | 1.7.25-4.module+el8.3.0+133+b8b54b58 |
| rocky 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python-nss-doc | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python3-nss | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::slf4j | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::velocity | 1.7-24.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 |
| ubuntu 16.04-ESM | jackson-databind | 2.4.2-3ubuntu0.1~esm2 |
Références
- https://access.redhat.com/errata/RHSA-2020:0159
- https://access.redhat.com/errata/RHSA-2020:0160
- https://access.redhat.com/errata/RHSA-2020:0161
- https://access.redhat.com/errata/RHSA-2020:0164
- https://access.redhat.com/errata/RHSA-2020:0445
- https://access.redhat.com/errata/RHSA-2020:1644
- https://access.redhat.com/security/cve/CVE-2019-16943
- https://bugzilla.redhat.com/1535313
Les 100 références
- https://bugzilla.redhat.com/1655438
- https://bugzilla.redhat.com/1656786
- https://bugzilla.redhat.com/1698084
- https://bugzilla.redhat.com/1744095
- https://bugzilla.redhat.com/1755831
- https://bugzilla.redhat.com/1755849
- https://bugzilla.redhat.com/1758187
- https://bugzilla.redhat.com/1758191
- https://bugzilla.redhat.com/1767125
- https://bugzilla.redhat.com/1767131
- https://bugzilla.redhat.com/1775293
- https://bugzilla.redhat.com/1777032
- https://bugzilla.redhat.com/1782486
- https://bugzilla.redhat.com/1793154
- https://bugzilla.redhat.com/1795215
- https://bugzilla.redhat.com/1802006
- https://bugzilla.redhat.com/1806840
- https://bugzilla.redhat.com/1807371
- https://bugzilla.redhat.com/1807421
- https://bugzilla.redhat.com/1809210
- https://bugzilla.redhat.com/1815470
- https://bugzilla.redhat.com/1815495
- https://bugzilla.redhat.com/1816330
- https://bugzilla.redhat.com/1816332
- https://bugzilla.redhat.com/1816337
- https://bugzilla.redhat.com/1816340
- https://bugzilla.redhat.com/show_bug.cgi?id=1535313
- https://bugzilla.redhat.com/show_bug.cgi?id=1655438
- https://bugzilla.redhat.com/show_bug.cgi?id=1656786
- https://bugzilla.redhat.com/show_bug.cgi?id=1698084
- https://bugzilla.redhat.com/show_bug.cgi?id=1744095
- https://bugzilla.redhat.com/show_bug.cgi?id=1755831
- https://bugzilla.redhat.com/show_bug.cgi?id=1755849
- https://bugzilla.redhat.com/show_bug.cgi?id=1758187
- https://bugzilla.redhat.com/show_bug.cgi?id=1758191
- https://bugzilla.redhat.com/show_bug.cgi?id=1767125
- https://bugzilla.redhat.com/show_bug.cgi?id=1767131
- https://bugzilla.redhat.com/show_bug.cgi?id=1775293
- https://bugzilla.redhat.com/show_bug.cgi?id=1777032
- https://bugzilla.redhat.com/show_bug.cgi?id=1782486
- https://bugzilla.redhat.com/show_bug.cgi?id=1795215
- https://bugzilla.redhat.com/show_bug.cgi?id=1802006
- https://bugzilla.redhat.com/show_bug.cgi?id=1806840
- https://bugzilla.redhat.com/show_bug.cgi?id=1807371
- https://bugzilla.redhat.com/show_bug.cgi?id=1807421
- https://bugzilla.redhat.com/show_bug.cgi?id=1809210
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16335
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16942
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16943
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17531
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20330
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10672
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10673
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9547
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548
- https://errata.almalinux.org/8/ALSA-2020-1644.html
- https://errata.rockylinux.org/RLSA-2020:1644
- https://github.com/FasterXML/jackson-databind
- https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b
- https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f
- https://github.com/FasterXML/jackson-databind/issues/2478
- https://linux.oracle.com/cve/CVE-2019-16943.html
- https://linux.oracle.com/errata/ELSA-2020-1644.html
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/5ec8d8d485c2c8ac55ea425f4cd96596ef37312532712639712ebcdd@%3Ccommits.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6@%3Cissues.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://nvd.nist.gov/vuln/detail/CVE-2019-16943
- https://seclists.org/bugtraq/2019/Oct/6
- https://security.netapp.com/advisory/ntap-20191017-0006
- https://security.netapp.com/advisory/ntap-20191017-0006/
- https://ubuntu.com/security/notices/USN-4813-1
- https://www.cve.org/CVERecord?id=CVE-2019-16943
- https://www.debian.org/security/2019/dsa-4542
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html