Summary
jss
ldapjdk
pki-core
[10.15.1-1.0.1]
- Remove upstream reference
[10.15.1-1]
- Rebase to PKI 10.15.1
- Fix CVE 2023-4727
resteasy
tomcatjss
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | idm-jss | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-jss-javadoc | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-ldapjdk | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-ldapjdk-javadoc | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-acme | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-base | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-base-java | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-ca | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-kra | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-server | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-symkey | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-pki-tools | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | idm-tomcatjss | 0:7.8.0-1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | python3-idm-pki | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | resteasy | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 |
| Oracle Linux · 8 | resteasy-javadoc | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 |
Vulnerabilities 1
-
High 7.5
Ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, wh…