Linux · Security advisory · May 17, 2022

ELSA-2022-1851: Security update for 14 packages

ELSA-2022-1851, released May 17, 2022, fixes 1 CVE across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0174
77th percentile

Fixed package versions

ProductReleaseFixed in
jssol 80:4.9.3-1.module+el8.6.0+20558+60d461b7
jss-javadocol 80:4.9.3-1.module+el8.6.0+20558+60d461b7
ldapjdkol 80:4.23.0-1.module+el8.5.0+20349+9cc212a8
ldapjdk-javadocol 80:4.23.0-1.module+el8.5.0+20349+9cc212a8
pki-acmeol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-baseol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-base-javaol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-caol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-kraol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-serverol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-symkeyol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
pki-toolsol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
python3-pkiol 80:10.12.0-2.0.1.module+el8.6.0+20558+60d461b7
tomcatjssol 80:7.7.1-1.module+el8.6.0+20558+60d461b7

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-4213 jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 7.5 0.0174 None reported
Showing 1 to 1 of 1 1