p PatchFirst

RLSA-2022:1851

RLSA-2022:1851 · Moderate: pki-core:10.6 security and bug fix update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fix(es): * JSS: memory leak in TLS connection leads to OOM (CVE-2021-4213) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • jss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.9.3-1.module+el8.6.0+788+76246f77

    Update to 0:4.9.3-1.module+el8.6.0+788+76246f77

  • ldapjdk Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.23.0-1.module+el8.7.0+1069+6f3de942

    Update to 0:4.23.0-1.module+el8.7.0+1069+6f3de942

  • ldapjdk Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.23.0-1.module+el8.5.0+701+8dc610e5

    Update to 0:4.23.0-1.module+el8.5.0+701+8dc610e5

  • pki-core Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:10.12.0-2.module+el8.6.0+788+76246f77

    Update to 0:10.12.0-2.module+el8.6.0+788+76246f77

  • tomcatjss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:7.7.1-1.module+el8.6.0+788+76246f77

    Update to 0:7.7.1-1.module+el8.6.0+788+76246f77

Original sources

Check your server →