Red Hat Security AdvisoryRHSA-2022:7088
libksba security update
Released 2022-10-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) libksba-1.3.0-6.el7_9, libksba-devel-1.3.0-6.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libksba-1.3.0-6.el7_9, libksba-devel-1.3.0-6.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) libksba-1.3.0-6.el7_9, libksba-1.3.0-6.el7_9.ppc, libksba-devel-1.3.0-6.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) libksba-1.3.0-6.el7_9, libksba-devel-1.3.0-6.el7_9
Fixes 1 record
Priority HIGH 82
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01703 · Published 2023-01-12 · Partial fix CWE-190