critical
CVE-2019-16943
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Trivy's own label is CRITICAL. Rated critical by NVD, GHSA. Rated lower by Red Hat (medium), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections, pki-deps:10.6::apache-commons-lang, pki-deps:10.6::bea-stax-api and 25 more | 3.2.2-10.module_el8.5.0+2577+9e95fe00 and 20 more |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections, apache-commons-lang, bea-stax-api and 43 more | 3.2.2-10.module+el8.2.0+5508+146760da and 27 more |
| Red Hat | elasticsearch-cloud-kubernetes, opendaylight, openshift-elasticsearch-plugin and 2 more | no fix listed |
Show all 121 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::velocity | 1.7-24.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-core | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-runtime | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-txw2 | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-annotations | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-core | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-databind | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-json-provider | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist-javadoc | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jss | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | jss-javadoc | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk-javadoc | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base-java | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-ca | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-kra | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-server | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-servlet-4.0-api | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-servlet-engine | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-symkey | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-tools | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | python-nss-doc | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-nss | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-pki | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j-jdk14 | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | tomcatjss | 7.4.1-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.2.0+5508+146760da |
| Red Hat | elasticsearch-cloud-kubernetes | no fix listed |
| Red Hat | opendaylight | no fix listed |
| Red Hat | openshift-elasticsearch-plugin | no fix listed |
| Red Hat | rh-maven35-jackson-databind | no fix listed |
| Red Hat | rh-maven35-jackson-databind-javadoc | no fix listed |
| rocky 8 | maven:3.5::slf4j | 1.7.25-4.module+el8.3.0+133+b8b54b58 |
| rocky 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python-nss-doc | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python3-nss | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::slf4j | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::velocity | 1.7-24.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 |
| ubuntu 16.04-ESM | jackson-databind | 2.4.2-3ubuntu0.1~esm2 |
References
- https://access.redhat.com/errata/RHSA-2020:0159
- https://access.redhat.com/errata/RHSA-2020:0160
- https://access.redhat.com/errata/RHSA-2020:0161
- https://access.redhat.com/errata/RHSA-2020:0164
- https://access.redhat.com/errata/RHSA-2020:0445
- https://access.redhat.com/errata/RHSA-2020:1644
- https://access.redhat.com/security/cve/CVE-2019-16943
- https://bugzilla.redhat.com/1535313
All 100 references
- https://bugzilla.redhat.com/1655438
- https://bugzilla.redhat.com/1656786
- https://bugzilla.redhat.com/1698084
- https://bugzilla.redhat.com/1744095
- https://bugzilla.redhat.com/1755831
- https://bugzilla.redhat.com/1755849
- https://bugzilla.redhat.com/1758187
- https://bugzilla.redhat.com/1758191
- https://bugzilla.redhat.com/1767125
- https://bugzilla.redhat.com/1767131
- https://bugzilla.redhat.com/1775293
- https://bugzilla.redhat.com/1777032
- https://bugzilla.redhat.com/1782486
- https://bugzilla.redhat.com/1793154
- https://bugzilla.redhat.com/1795215
- https://bugzilla.redhat.com/1802006
- https://bugzilla.redhat.com/1806840
- https://bugzilla.redhat.com/1807371
- https://bugzilla.redhat.com/1807421
- https://bugzilla.redhat.com/1809210
- https://bugzilla.redhat.com/1815470
- https://bugzilla.redhat.com/1815495
- https://bugzilla.redhat.com/1816330
- https://bugzilla.redhat.com/1816332
- https://bugzilla.redhat.com/1816337
- https://bugzilla.redhat.com/1816340
- https://bugzilla.redhat.com/show_bug.cgi?id=1535313
- https://bugzilla.redhat.com/show_bug.cgi?id=1655438
- https://bugzilla.redhat.com/show_bug.cgi?id=1656786
- https://bugzilla.redhat.com/show_bug.cgi?id=1698084
- https://bugzilla.redhat.com/show_bug.cgi?id=1744095
- https://bugzilla.redhat.com/show_bug.cgi?id=1755831
- https://bugzilla.redhat.com/show_bug.cgi?id=1755849
- https://bugzilla.redhat.com/show_bug.cgi?id=1758187
- https://bugzilla.redhat.com/show_bug.cgi?id=1758191
- https://bugzilla.redhat.com/show_bug.cgi?id=1767125
- https://bugzilla.redhat.com/show_bug.cgi?id=1767131
- https://bugzilla.redhat.com/show_bug.cgi?id=1775293
- https://bugzilla.redhat.com/show_bug.cgi?id=1777032
- https://bugzilla.redhat.com/show_bug.cgi?id=1782486
- https://bugzilla.redhat.com/show_bug.cgi?id=1795215
- https://bugzilla.redhat.com/show_bug.cgi?id=1802006
- https://bugzilla.redhat.com/show_bug.cgi?id=1806840
- https://bugzilla.redhat.com/show_bug.cgi?id=1807371
- https://bugzilla.redhat.com/show_bug.cgi?id=1807421
- https://bugzilla.redhat.com/show_bug.cgi?id=1809210
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16335
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16942
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16943
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17531
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20330
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10672
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10673
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9547
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548
- https://errata.almalinux.org/8/ALSA-2020-1644.html
- https://errata.rockylinux.org/RLSA-2020:1644
- https://github.com/FasterXML/jackson-databind
- https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b
- https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f
- https://github.com/FasterXML/jackson-databind/issues/2478
- https://linux.oracle.com/cve/CVE-2019-16943.html
- https://linux.oracle.com/errata/ELSA-2020-1644.html
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/5ec8d8d485c2c8ac55ea425f4cd96596ef37312532712639712ebcdd@%3Ccommits.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6@%3Cissues.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://nvd.nist.gov/vuln/detail/CVE-2019-16943
- https://seclists.org/bugtraq/2019/Oct/6
- https://security.netapp.com/advisory/ntap-20191017-0006
- https://security.netapp.com/advisory/ntap-20191017-0006/
- https://ubuntu.com/security/notices/USN-4813-1
- https://www.cve.org/CVERecord?id=CVE-2019-16943
- https://www.debian.org/security/2019/dsa-4542
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html