Lucene search

K
oraclelinuxOracleLinuxELSA-2021-1609
HistoryMay 25, 2021 - 12:00 a.m.

p11-kit security, bug fix, and enhancement update

2021-05-2500:00:00
linux.oracle.com
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

[0.23.22-1]

  • Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363)
  • Preserve DT_NEEDED information from the previous version, flagged by rpmdiff
  • Add xsltproc to BR
    [0.23.21-4]
  • Fix realloc usage on proxy cleanup (#1894979)
  • Make ‘trust anchor --store’ preserve all attributes from .p11-kit files
    [0.23.21-3]
  • Restore clobbered changelog entry
    [0.23.21-2]
  • Update p11-kit-invalid-config.patch to be more thorough (thanks to
    Alexander Sosedkin)
    [0.23.21-1]
  • Update to upstream 0.23.21 release

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P