Skip to content
OpenAdvisories
Medium RLSA-2022:1851 1 CVE

Moderate: pki-core:10.6 security and bug fix update

Published May 10, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

* JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Fixed packages 5

ReleasePackageFixed in
Rocky Linux · 8 jss 0:4.9.3-1.module+el8.6.0+788+76246f77
Rocky Linux · 8 ldapjdk 0:4.23.0-1.module+el8.7.0+1069+6f3de942
Rocky Linux · 8 ldapjdk 0:4.23.0-1.module+el8.5.0+701+8dc610e5
Rocky Linux · 8 pki-core 0:10.12.0-2.module+el8.6.0+788+76246f77
Rocky Linux · 8 tomcatjss 0:7.7.1-1.module+el8.6.0+788+76246f77

Vulnerabilities 1

  • Unscored —
    CVE-2021-4213

    A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the se…

    jss jss Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1904112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1980378
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2004084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2006070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2019200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2027470
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2042900