(RHSA-2021:0966) Important: pki-core:10.6 security update

2021-03-2310:29:41

access.redhat.com

0.001 Low

EPSS

Percentile

51.0%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: Unprivileged users can renew any certificate (CVE-2021-20179)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchpki-server< 10.9.4-3.module+el8.3.0+10353+73f6df5bpki-server-10.9.4-3.module+el8.3.0+10353+73f6df5b.noarch.rpm
RedHatanynoarchpki-base< 10.9.4-3.module+el8.3.0+10353+73f6df5bpki-base-10.9.4-3.module+el8.3.0+10353+73f6df5b.noarch.rpm
RedHatanyx86_64jss-debuginfo< 4.7.3-1.module+el8.3.0+8058+d5cd4219jss-debuginfo-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHatanys390xpki-tools< 10.9.4-3.module+el8.3.0+10353+73f6df5bpki-tools-10.9.4-3.module+el8.3.0+10353+73f6df5b.s390x.rpm
RedHatanyx86_64jss< 4.7.3-1.module+el8.3.0+8058+d5cd4219jss-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHatanyx86_64jss-javadoc< 4.7.3-1.module+el8.3.0+8058+d5cd4219jss-javadoc-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHatanynoarchldapjdk< 4.22.0-1.module+el8.3.0+6784+6e1e4c62ldapjdk-4.22.0-1.module+el8.3.0+6784+6e1e4c62.noarch.rpm
RedHatanyppc64lepki-symkey< 10.9.4-3.module+el8.3.0+10353+73f6df5bpki-symkey-10.9.4-3.module+el8.3.0+10353+73f6df5b.ppc64le.rpm
RedHatanynoarchldapjdk-javadoc< 4.22.0-1.module+el8.3.0+6784+6e1e4c62ldapjdk-javadoc-4.22.0-1.module+el8.3.0+6784+6e1e4c62.noarch.rpm
RedHatanyppc64lepki-tools< 10.9.4-3.module+el8.3.0+10353+73f6df5bpki-tools-10.9.4-3.module+el8.3.0+10353+73f6df5b.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	pki-server	< 10.9.4-3.module+el8.3.0+10353+73f6df5b	pki-server-10.9.4-3.module+el8.3.0+10353+73f6df5b.noarch.rpm
RedHat	any	noarch	pki-base	< 10.9.4-3.module+el8.3.0+10353+73f6df5b	pki-base-10.9.4-3.module+el8.3.0+10353+73f6df5b.noarch.rpm
RedHat	any	x86_64	jss-debuginfo	< 4.7.3-1.module+el8.3.0+8058+d5cd4219	jss-debuginfo-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHat	any	s390x	pki-tools	< 10.9.4-3.module+el8.3.0+10353+73f6df5b	pki-tools-10.9.4-3.module+el8.3.0+10353+73f6df5b.s390x.rpm
RedHat	any	x86_64	jss	< 4.7.3-1.module+el8.3.0+8058+d5cd4219	jss-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHat	any	x86_64	jss-javadoc	< 4.7.3-1.module+el8.3.0+8058+d5cd4219	jss-javadoc-4.7.3-1.module+el8.3.0+8058+d5cd4219.x86_64.rpm
RedHat	any	noarch	ldapjdk	< 4.22.0-1.module+el8.3.0+6784+6e1e4c62	ldapjdk-4.22.0-1.module+el8.3.0+6784+6e1e4c62.noarch.rpm
RedHat	any	ppc64le	pki-symkey	< 10.9.4-3.module+el8.3.0+10353+73f6df5b	pki-symkey-10.9.4-3.module+el8.3.0+10353+73f6df5b.ppc64le.rpm
RedHat	any	noarch	ldapjdk-javadoc	< 4.22.0-1.module+el8.3.0+6784+6e1e4c62	ldapjdk-javadoc-4.22.0-1.module+el8.3.0+6784+6e1e4c62.noarch.rpm
RedHat	any	ppc64le	pki-tools	< 10.9.4-3.module+el8.3.0+10353+73f6df5b	pki-tools-10.9.4-3.module+el8.3.0+10353+73f6df5b.ppc64le.rpm