Summary
[10.4.1-11]
- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | pki-base | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-base-java | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-ca | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-javadoc | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-kra | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-server | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-symkey | 0:10.4.1-11.el7 |
| Oracle Linux · 7 | pki-tools | 0:10.4.1-11.el7 |
Vulnerabilities 1
-
Medium 5.9
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the p…