p PatchFirst

RLSA-2024:4367

RLSA-2024:4367 · Important: pki-core security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fix(es): * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • jss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb

  • ldapjdk Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb

  • pki-core Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:10.15.1-1.module+el8.10.0+1836+57f0c18f

    Update to 0:10.15.1-1.module+el8.10.0+1836+57f0c18f

  • resteasy Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.0.26-7.module+el8.10.0+1767+f923f786

    Update to 0:3.0.26-7.module+el8.10.0+1767+f923f786

  • resteasy Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb

    Update to 0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb

  • tomcatjss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb

Original sources

Check your server →