[Bug 1967401](https://bugzilla.redhat.com/show_bug.cgi?id=1967401) - [CVE-2021-3551](https://access.redhat.com/security/cve/CVE-2021-3551) pki-core: pki-server: Dogtag installer "pkispawn" logs admin credentials into a world- readable log file. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-54a73a7112 2021-06-18 01:07:19.135549 --------------------------------------------------------------------------------Name : dogtag-pki Product : Fedora 34 Version : 10.10.6 Release : 1.fc34 URL : https://www.dogtagpki.org Summary : Dogtag PKI Package Description : Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: * Automatic Certificate Management Environment (ACME) Responder * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) --------------------------------------------------------------------------------Update Information: [Bug 1967401](https://bugzilla.redhat.com/show_bug.cgi?id=1967401) -[CVE-2021-3551](https://access.redhat.com/security/cve/CVE-2021-3551) pki-core: pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file --------------------------------------------------------------------------------ChangeLog: * Wed Jun 9 2021 Dogtag PKI Team - 10.10.6-1 - Rebase to PKI 10.10.6 - CVE-2021-3551 Fix pkispawn logging admin credentials --------------------------------------------------------------------------------References: [ 1 ] Bug #1967401 - CVE-2021-3551 pki-core: pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1967401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-54a73a7112' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- Use tomcat instead of pki-servlet-engine in ELN and RHEL 9 - Drop dependency on esc for s390(x) architectures - build pki-core properly for ELN and RHEL 9 - Fix CVE-2021-20179: Unprivileged users can renew any certificate - Drop i686 architecture going forward. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-c0d6637ca5 2021-03-19 19:51:22.367631 --------------------------------------------------------------------------------Name : dogtag-pki Product : Fedora 34 Version : 10.10.5 Release : 3.fc34 URL : https://www.dogtagpki.org Summary : Dogtag PKI Package Description : Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: * Automatic Certificate Management Environment (ACME) Responder * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) --------------------------------------------------------------------------------Update Information: - Use tomcat instead of pki-servlet-engine in ELN and RHEL 9 - Drop dependency on esc for s390(x) architectures - build pki-core properly for ELN and RHEL 9 -Fix CVE-2021-20179: Unprivileged users can renew any certificate - Drop i686 architecture going forward --------------------------------------------------------------------------------ChangeLog: * Wed Mar 10 2021 Dogtag PKI Team - 10.10.5-3 - Use tomcat instead of pki-servlet-engine in ELN * Wed Mar 10 2021 Dogtag PKI Team - 10.10.5-2 - Drop dependency on esc for s390(x) architectures --------------------------------------------------------------------------------References: [ 1 ] Bug #1914379 - CVE-2021-20179 pki-core: Unprivileged users can renew any certificate https://bugzilla.redhat.com/show_bug.cgi?id=1914379 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-c0d6637ca5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518 - Dogtag PKI adopted to work with 389-ds with the fix - FreeIPA rebuilt to require new Dogtag and 389-ds versions. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-7458e2d835 2021-03-03 23:15:16.431618 --------------------------------------------------------------------------------Name : dogtag-pki Product : Fedora 33 Version : 10.10.5 Release : 1.fc33 URL : https://www.dogtagpki.org Summary : Dogtag PKI Package Description : Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: * Automatic Certificate Management Environment (ACME) Responder * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) --------------------------------------------------------------------------------Update Information: - 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518 - Dogtag PKI adopted to work with 389-ds with the fix - FreeIPA rebuilt to require new Dogtag and 389-ds versions --------------------------------------------------------------------------------ChangeLog: * Thu Feb 25 2021 Dogtag PKI Team - 10.10.5-1 - Rebase to upstream stable v10.10.5 release * Tue Jan 26 2021 Fedora Release Engineering - 10.10.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1908653 - CVE-2020-35518 389-ds-base: information disclosure during the binding of a DN [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1908653 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-7458e2d835' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518 - Dogtag PKI adopted to work with 389-ds with the fix - FreeIPA rebuilt to require new Dogtag and 389-ds versions. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-263244c071 2021-03-03 21:06:10.008268 --------------------------------------------------------------------------------Name : dogtag-pki Product : Fedora 34 Version : 10.10.5 Release : 1.fc34 URL : https://www.dogtagpki.org Summary : Dogtag PKI Package Description : Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: * Automatic Certificate Management Environment (ACME) Responder * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) --------------------------------------------------------------------------------Update Information: - 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518 - Dogtag PKI adopted to work with 389-ds with the fix - FreeIPA rebuilt to require new Dogtag and 389-ds versions --------------------------------------------------------------------------------ChangeLog: * Thu Feb 25 2021 Dogtag PKI Team - 10.10.5-1 - Rebase to upstream stable v10.10.5 release --------------------------------------------------------------------------------References: [ 1 ] Bug #1908653 - CVE-2020-35518 389-ds-base: information disclosure during the binding of a DN [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1908653 [ 2 ] Bug #1929940 - FreeIPA server deployment fails in current F34 and Rawhide composes https://bugzilla.redhat.com/show_bug.cgi?id=1929940 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-263244c071' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.