(RHSA-2021:1775) Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

2021-05-1806:04:17

access.redhat.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.6%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class (CVE-2020-1695)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64pki-core-debuginfo< 10.10.5-2.module+el8.4.0+10466+9830f79epki-core-debuginfo-10.10.5-2.module+el8.4.0+10466+9830f79e.x86_64.rpm
RedHatanys390xpython-nss-debugsource< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x.rpm
RedHatanynoarchpki-server< 10.10.5-2.module+el8.4.0+10466+9830f79epki-server-10.10.5-2.module+el8.4.0+10466+9830f79e.noarch.rpm
RedHatanynoarchslf4j< 1.7.25-4.module+el8.1.0+3366+6dfb954cslf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanyppc64lejss-debuginfo< 4.8.1-2.module+el8.4.0+10451+3e5b5448jss-debuginfo-4.8.1-2.module+el8.4.0+10451+3e5b5448.ppc64le.rpm
RedHatanyx86_64pki-tools< 10.10.5-2.module+el8.4.0+10466+9830f79epki-tools-10.10.5-2.module+el8.4.0+10466+9830f79e.x86_64.rpm
RedHatanyaarch64pki-symkey< 10.10.5-2.module+el8.4.0+10466+9830f79epki-symkey-10.10.5-2.module+el8.4.0+10466+9830f79e.aarch64.rpm
RedHatanyx86_64python3-nss-debuginfo< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython3-nss-debuginfo-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
RedHatanynoarchpki-ca< 10.10.5-2.module+el8.4.0+10466+9830f79epki-ca-10.10.5-2.module+el8.4.0+10466+9830f79e.noarch.rpm
RedHatanyppc64lepki-core-debugsource< 10.10.5-2.module+el8.4.0+10466+9830f79epki-core-debugsource-10.10.5-2.module+el8.4.0+10466+9830f79e.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	pki-core-debuginfo	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-core-debuginfo-10.10.5-2.module+el8.4.0+10466+9830f79e.x86_64.rpm
RedHat	any	s390x	python-nss-debugsource	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.s390x.rpm
RedHat	any	noarch	pki-server	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-server-10.10.5-2.module+el8.4.0+10466+9830f79e.noarch.rpm
RedHat	any	noarch	slf4j	< 1.7.25-4.module+el8.1.0+3366+6dfb954c	slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	ppc64le	jss-debuginfo	< 4.8.1-2.module+el8.4.0+10451+3e5b5448	jss-debuginfo-4.8.1-2.module+el8.4.0+10451+3e5b5448.ppc64le.rpm
RedHat	any	x86_64	pki-tools	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-tools-10.10.5-2.module+el8.4.0+10466+9830f79e.x86_64.rpm
RedHat	any	aarch64	pki-symkey	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-symkey-10.10.5-2.module+el8.4.0+10466+9830f79e.aarch64.rpm
RedHat	any	x86_64	python3-nss-debuginfo	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python3-nss-debuginfo-1.0.1-10.module+el8.1.0+3366+6dfb954c.x86_64.rpm
RedHat	any	noarch	pki-ca	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-ca-10.10.5-2.module+el8.4.0+10466+9830f79e.noarch.rpm
RedHat	any	ppc64le	pki-core-debugsource	< 10.10.5-2.module+el8.4.0+10466+9830f79e	pki-core-debugsource-10.10.5-2.module+el8.4.0+10466+9830f79e.ppc64le.rpm