Skip to content
OpenAdvisories
Medium ELSA-2022-1851 1 CVE

Moderate: pki-core:10.6 security and bug fix update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Summary

jss
[4.9.3-1]
- Rebase to JSS 4.9.3
- Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]

[4.9.2-1]
- Rebase to JSS 4.9.2

ldapjdk
[4.23.0-1]
- Rebase to LDAP SDK 4.23.0

[4.23.0-0.1]
- Rebase to LDAP SDK 4.23.0-alpha1

pki-core
[10.12.0-2.0.1]
- Remove upstream reference.

[10.12.0-2]
- Bug 2027470 - pki-healthcheck ClonesConnectivyAndDataCheck fails

[10.12.0-0.1]
- Rebase to PKI 10.12.0
- Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
- Bug 1984455 - [RFE] Date Format on the TPS Agent Page
- Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
- Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
- Bug 2006070 - Upgrades incorrectly add secret attribute to connectors

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 jss 0:4.9.3-1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 jss-javadoc 0:4.9.3-1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 ldapjdk 0:4.23.0-1.module+el8.5.0+20349+9cc212a8
Oracle Linux · 8 ldapjdk-javadoc 0:4.23.0-1.module+el8.5.0+20349+9cc212a8
Oracle Linux · 8 pki-acme 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-base 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-base-java 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-ca 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-kra 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-server 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-symkey 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 pki-tools 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 python3-pki 0:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
Oracle Linux · 8 tomcatjss 0:7.7.1-1.module+el8.6.0+20558+60d461b7

Vulnerabilities 1

  • Unscored —

    A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the se…