Linux · Security advisory · July 10, 2024
ELSA-2024-4367: Security update for 16 packages
ELSA-2024-4367, released July 10, 2024, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0067
51st percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| idm-jss | ol 8 | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 |
| idm-jss-javadoc | ol 8 | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 |
| idm-ldapjdk | ol 8 | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 |
| idm-ldapjdk-javadoc | ol 8 | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-acme | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-base | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-base-java | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-ca | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-kra | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-server | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-symkey | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-pki-tools | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| idm-tomcatjss | ol 8 | 0:7.8.0-1.module+el8.10.0+90362+5113f0b5 |
| python3-idm-pki | ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 |
| resteasy | ol 8 | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 |
| resteasy-javadoc | ol 8 | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-4727 | idm-jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 7.5 | 0.0067 | None reported |
Showing 1 to 1 of 1
1