Summary
pki-core
[10.10.5-3.0.1]
- Remove upstream reference.
[10.10.5-3]
- Bug 1960146 - CVE-2021-3551 Dogtag installer 'pkispawn' logs admin credentials into a world-readable log file
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | jss | 0:4.8.1-2.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | jss-javadoc | 0:4.8.1-2.module+el8.4.0+20154+9830f79e |
| Oracle Linux · 8 | ldapjdk | 0:4.22.0-1.module+el8.3.0+7857+983338ee |
| Oracle Linux · 8 | ldapjdk-javadoc | 0:4.22.0-1.module+el8.3.0+7857+983338ee |
| Oracle Linux · 8 | pki-acme | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-base | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-base-java | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-ca | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-kra | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-server | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-symkey | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | pki-tools | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | python3-pki | 0:10.10.5-3.0.1.module+el8.4.0+20181+8592f730 |
| Oracle Linux · 8 | tomcatjss | 0:7.6.1-1.module+el8.4.0+20053+7cddd5b6 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in th…