Summary
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.
Security Fix(es):
* pki-core: Unprivileged users can renew any certificate (CVE-2021-20179)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | ldapjdk | 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a |
Vulnerabilities 1
-
Unscored —
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corre…