Important: pki-core:10.6 security update

2021-03-2310:29:41

errata.almalinux.org

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

pki-core: Unprivileged users can renew any certificate (CVE-2021-20179)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64jss< 4.7.3-1.module_el8.3.0+2061+d5cd4219.almajss-4.7.3-1.module_el8.3.0+2061+d5cd4219.alma.x86_64.rpm
almalinux8x86_64jss-javadoc< 4.7.3-1.module_el8.3.0+2061+d5cd4219.almajss-javadoc-4.7.3-1.module_el8.3.0+2061+d5cd4219.alma.x86_64.rpm
almalinux8noarchldapjdk< 4.22.0-1.module_el8.3.0+2061+d5cd4219ldapjdk-4.22.0-1.module_el8.3.0+2061+d5cd4219.noarch.rpm
almalinux8noarchldapjdk-javadoc< 4.22.0-1.module_el8.3.0+2061+d5cd4219ldapjdk-javadoc-4.22.0-1.module_el8.3.0+2061+d5cd4219.noarch.rpm
almalinux8noarchpki-base< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-base-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux8noarchpki-base-java< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-base-java-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux8noarchpki-ca< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-ca-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux8noarchpki-kra< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-kra-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux8noarchpki-server< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-server-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux8x86_64pki-symkey< 10.9.4-3.module_el8.3.0+2066+73f6df5bpki-symkey-10.9.4-3.module_el8.3.0+2066+73f6df5b.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	jss	< 4.7.3-1.module_el8.3.0+2061+d5cd4219.alma	jss-4.7.3-1.module_el8.3.0+2061+d5cd4219.alma.x86_64.rpm
almalinux	8	x86_64	jss-javadoc	< 4.7.3-1.module_el8.3.0+2061+d5cd4219.alma	jss-javadoc-4.7.3-1.module_el8.3.0+2061+d5cd4219.alma.x86_64.rpm
almalinux	8	noarch	ldapjdk	< 4.22.0-1.module_el8.3.0+2061+d5cd4219	ldapjdk-4.22.0-1.module_el8.3.0+2061+d5cd4219.noarch.rpm
almalinux	8	noarch	ldapjdk-javadoc	< 4.22.0-1.module_el8.3.0+2061+d5cd4219	ldapjdk-javadoc-4.22.0-1.module_el8.3.0+2061+d5cd4219.noarch.rpm
almalinux	8	noarch	pki-base	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-base-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux	8	noarch	pki-base-java	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-base-java-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux	8	noarch	pki-ca	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-ca-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux	8	noarch	pki-kra	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-kra-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux	8	noarch	pki-server	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-server-10.9.4-3.module_el8.3.0+2066+73f6df5b.noarch.rpm
almalinux	8	x86_64	pki-symkey	< 10.9.4-3.module_el8.3.0+2066+73f6df5b	pki-symkey-10.9.4-3.module_el8.3.0+2066+73f6df5b.x86_64.rpm