Description
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Certificate System 7 | rhpki-ca +1 | 7.2.0-4 | RHSA-2008:0566, RHSA-2007:0934 |
| Red Hat Certificate System 7 | rhpki-common | 7.2.0-8 | RHSA-2008:0566, RHSA-2007:0934 |
Advisories 2
- RHSA-2008:0566 Red Hat Security Advisory: rhpki-util, rhpki-common, and rhpki-ca security and bug fix update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2007:0934 Red Hat Security Advisory: rhpki-util, rhpki-common, rhpki-ca security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
References
- ADV-2007-3406 vdb-entry
- 27557 third-party-advisory
- 40440 vdb-entry
- ADV-2007-3405 vdb-entry
- 26377 vdb-entry
- RHSA-2008:0566 vendor-advisory
- 1020532 vdb-entry
- RHSA-2007:0934 vendor-advisory