Red Hat Security Advisory

RHSA-2018:1979

pki-core security, bug fix, and enhancement update

Released 2018-06-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +6
Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +6
Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +5
Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +6
Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +5
Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.1-13.1.el7_5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +5
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) pki-base-10.5.1-13.1.el7_5, pki-base-java-10.5.1-13.1.el7_5, pki-ca-10.5.1-13.1.el7_5 +6

Fixes 1 record

TI-2018-00999 CVE-2018-1080 · GHSA-h277-5r6v-m3gv

Improper access control in [UNKNOWN] pki-core

LOW 38

Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01516 Published 2018-07-02 Partial fix CWE-284