Linux · Security advisory · May 10, 2022

RHSA-2022:1851: Security update for 14 packages

RHSA-2022:1851, released May 10, 2022, fixes 1 CVE across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0174
77th percentile

Fixed package versions

ProductReleaseFixed in
jssRHEL 80:4.9.3-1.module+el8.6.0+14244+60d461b7
jss-javadocRHEL 80:4.9.3-1.module+el8.6.0+14244+60d461b7
ldapjdkRHEL 80:4.23.0-1.module+el8.5.0+11983+6ba118b4
ldapjdk-javadocRHEL 80:4.23.0-1.module+el8.5.0+11983+6ba118b4
pki-acmeRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-baseRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-base-javaRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-caRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-kraRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-serverRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-symkeyRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
pki-toolsRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
python3-pkiRHEL 80:10.12.0-2.module+el8.6.0+14115+8b467244
tomcatjssRHEL 80:7.7.1-1.module+el8.6.0+13291+248751b1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-4213 jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... 7.5 0.0174 None reported
Showing 1 to 1 of 1 1