Lucene search

K
oraclelinuxOracleLinuxELSA-2023-7022
HistoryNov 17, 2023 - 12:00 a.m.

tang security and bug fix update

2023-11-1700:00:00
linux.oracle.com
2
tang
bug fix
race condition
creating keys
rotating keys
user group
security update
cve-2023-1672
unix

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

[7-8]

  • Set correct user/group (tang/tang) in tangd-keygen
    Resolves: rhbz#2188743
    [7-7]
  • Fix race condition when creating/rotating keys
    Resolves: rhbz#2182410
    Resolves: CVE-2023-1672

5.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%