critical
CVE-2019-16335
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Trivy's own label is CRITICAL. Rated critical by NVD, GHSA. Rated lower by Red Hat (medium), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections, pki-deps:10.6::apache-commons-lang, pki-deps:10.6::bea-stax-api and 25 more | 3.2.2-10.module_el8.5.0+2577+9e95fe00 and 20 more |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-1 |
| debian 12 | jackson-databind | 2.10.0-1 |
| debian 13 | jackson-databind | 2.10.0-1 |
| debian 14 | jackson-databind | 2.10.0-1 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-1 |
| Oracle Linux 8 | apache-commons-collections, apache-commons-lang, bea-stax-api and 43 more | 3.2.2-10.module+el8.2.0+5508+146760da and 27 more |
| Red Hat | elasticsearch-cloud-kubernetes, opendaylight, openshift-elasticsearch-plugin and 2 more | no fix listed |
Show all 121 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::velocity | 1.7-24.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-1 |
| debian 12 | jackson-databind | 2.10.0-1 |
| debian 13 | jackson-databind | 2.10.0-1 |
| debian 14 | jackson-databind | 2.10.0-1 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-1 |
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-core | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-runtime | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-txw2 | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-annotations | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-core | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-databind | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-json-provider | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist-javadoc | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jss | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | jss-javadoc | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk-javadoc | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base-java | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-ca | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-kra | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-server | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-servlet-4.0-api | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-servlet-engine | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-symkey | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-tools | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | python-nss-doc | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-nss | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-pki | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j-jdk14 | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | tomcatjss | 7.4.1-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.2.0+5508+146760da |
| Red Hat | elasticsearch-cloud-kubernetes | no fix listed |
| Red Hat | opendaylight | no fix listed |
| Red Hat | openshift-elasticsearch-plugin | no fix listed |
| Red Hat | rh-maven35-jackson-databind | no fix listed |
| Red Hat | rh-maven35-jackson-databind-javadoc | no fix listed |
| rocky 8 | maven:3.5::slf4j | 1.7.25-4.module+el8.3.0+133+b8b54b58 |
| rocky 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python-nss-doc | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python3-nss | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::slf4j | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::velocity | 1.7-24.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 |
| ubuntu 16.04-ESM | jackson-databind | 2.4.2-3ubuntu0.1~esm2 |
References
- https://access.redhat.com/errata/RHSA-2019:3200
- https://access.redhat.com/errata/RHSA-2020:0159
- https://access.redhat.com/errata/RHSA-2020:0160
- https://access.redhat.com/errata/RHSA-2020:0161
- https://access.redhat.com/errata/RHSA-2020:0164
- https://access.redhat.com/errata/RHSA-2020:0445
- https://access.redhat.com/errata/RHSA-2020:0729
- https://access.redhat.com/errata/RHSA-2020:1644
All 105 references
- https://access.redhat.com/security/cve/CVE-2019-16335
- https://bugzilla.redhat.com/1535313
- https://bugzilla.redhat.com/1655438
- https://bugzilla.redhat.com/1656786
- https://bugzilla.redhat.com/1698084
- https://bugzilla.redhat.com/1744095
- https://bugzilla.redhat.com/1755831
- https://bugzilla.redhat.com/1755849
- https://bugzilla.redhat.com/1758187
- https://bugzilla.redhat.com/1758191
- https://bugzilla.redhat.com/1767125
- https://bugzilla.redhat.com/1767131
- https://bugzilla.redhat.com/1775293
- https://bugzilla.redhat.com/1777032
- https://bugzilla.redhat.com/1782486
- https://bugzilla.redhat.com/1793154
- https://bugzilla.redhat.com/1795215
- https://bugzilla.redhat.com/1802006
- https://bugzilla.redhat.com/1806840
- https://bugzilla.redhat.com/1807371
- https://bugzilla.redhat.com/1807421
- https://bugzilla.redhat.com/1809210
- https://bugzilla.redhat.com/1815470
- https://bugzilla.redhat.com/1815495
- https://bugzilla.redhat.com/1816330
- https://bugzilla.redhat.com/1816332
- https://bugzilla.redhat.com/1816337
- https://bugzilla.redhat.com/1816340
- https://bugzilla.redhat.com/show_bug.cgi?id=1535313
- https://bugzilla.redhat.com/show_bug.cgi?id=1655438
- https://bugzilla.redhat.com/show_bug.cgi?id=1656786
- https://bugzilla.redhat.com/show_bug.cgi?id=1698084
- https://bugzilla.redhat.com/show_bug.cgi?id=1744095
- https://bugzilla.redhat.com/show_bug.cgi?id=1755831
- https://bugzilla.redhat.com/show_bug.cgi?id=1755849
- https://bugzilla.redhat.com/show_bug.cgi?id=1758187
- https://bugzilla.redhat.com/show_bug.cgi?id=1758191
- https://bugzilla.redhat.com/show_bug.cgi?id=1767125
- https://bugzilla.redhat.com/show_bug.cgi?id=1767131
- https://bugzilla.redhat.com/show_bug.cgi?id=1775293
- https://bugzilla.redhat.com/show_bug.cgi?id=1777032
- https://bugzilla.redhat.com/show_bug.cgi?id=1782486
- https://bugzilla.redhat.com/show_bug.cgi?id=1795215
- https://bugzilla.redhat.com/show_bug.cgi?id=1802006
- https://bugzilla.redhat.com/show_bug.cgi?id=1806840
- https://bugzilla.redhat.com/show_bug.cgi?id=1807371
- https://bugzilla.redhat.com/show_bug.cgi?id=1807421
- https://bugzilla.redhat.com/show_bug.cgi?id=1809210
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16335
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16942
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16943
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17531
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20330
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10672
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10673
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9547
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548
- https://errata.almalinux.org/8/ALSA-2020-1644.html
- https://errata.rockylinux.org/RLSA-2020:1644
- https://github.com/FasterXML/jackson-databind
- https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db
- https://github.com/FasterXML/jackson-databind/issues/2449
- https://linux.oracle.com/cve/CVE-2019-16335.html
- https://linux.oracle.com/errata/ELSA-2020-1644.html
- https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69@%3Ccommits.tinkerpop.apache.org%3E
- https://lists.apache.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1@%3Cissues.hbase.apache.org%3E
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/a360b46061c91c5cad789b6c3190aef9b9f223a2b75c9c9f046fe016@%3Cissues.hbase.apache.org%3E
- https://lists.apache.org/thread.html/ad0d238e97a7da5eca47a014f0f7e81f440ed6bf74a93183825e18b9@%3Cissues.hbase.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/dc6b5cad721a4f6b3b62ed1163894941140d9d5656140fb757505ca0@%3Cissues.hbase.apache.org%3E
- https://lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb@%3Ccommits.hbase.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/
- https://nvd.nist.gov/vuln/detail/CVE-2019-16335
- https://seclists.org/bugtraq/2019/Oct/6
- https://security.netapp.com/advisory/ntap-20191004-0002
- https://security.netapp.com/advisory/ntap-20191004-0002/
- https://ubuntu.com/security/notices/USN-4813-1
- https://www.cve.org/CVERecord?id=CVE-2019-16335
- https://www.debian.org/security/2019/dsa-4542
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html