The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jackson-jaxrs-providersUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-coreUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade python3-nssUpgrade python-nss-docUpgrade slf4j-jdk14Upgrade apache-commons-netUpgrade slf4jUpgrade apache-commons-collectionsUpgrade javassistUpgrade glassfish-jaxb-apiUpgrade apache-commons-langUpgrade jackson-coreUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade stax-exUpgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade resteasyUpgrade jackson-annotationsUpgrade xmlstreambufferUpgrade pki-servlet-engineUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade glassfish-jaxb-runtimeUpgrade javassist-javadocUpgrade velocityUpgrade xml-commons-apisUpgrade bea-stax-api | May 4, 2022 | Jul 14, 2020 |
| Centos_linux | — | Upgrade xerces-j2Upgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade jakarta-commons-httpclientUpgrade pki-servlet-engineUpgrade tomcatjssUpgrade jackson-jaxrs-json-providerUpgrade pki-symkey-debuginfoUpgrade bea-stax-apiUpgrade jss-javadocUpgrade apache-commons-langUpgrade javassist-javadocUpgrade stax-exUpgrade xmlstreambufferUpgrade javassistUpgrade pki-kraUpgrade xalan-j2Upgrade ldapjdk-javadocUpgrade resteasyUpgrade pki-tools-debuginfoUpgrade pki-base-javaUpgrade glassfish-fastinfosetUpgrade xml-commons-apisUpgrade ldapjdkUpgrade velocityUpgrade glassfish-jaxb-coreUpgrade pki-baseUpgrade pki-serverUpgrade jackson-databindUpgrade pki-caUpgrade apache-commons-collectionsUpgrade pki-core-debuginfoUpgrade apache-commons-netUpgrade slf4jUpgrade pki-toolsUpgrade glassfish-jaxb-runtimeUpgrade python-nss-docUpgrade jssUpgrade xml-commons-resolverUpgrade jss-debuginfoUpgrade jss-debugsourceUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade python3-nssUpgrade pki-core-debugsourceUpgrade python3-nss-debuginfoUpgrade xsomUpgrade jackson-jaxrs-providersUpgrade python-nss-debugsourceUpgrade pki-symkeyUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-txw2Upgrade slf4j-jdk14 | Nov 5, 2020 | Jul 14, 2020 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Jul 14, 2020 |
| Oracle_linux | — | Upgrade python3-nssUpgrade python3-pkiUpgrade jakarta-commons-httpclientUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade bea-stax-apiUpgrade glassfish-jaxb-apiUpgrade pki-servlet-engineUpgrade pki-kraUpgrade xml-commons-apisUpgrade javassistUpgrade pki-symkeyUpgrade stax-exUpgrade ldapjdk-javadocUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade velocityUpgrade xalan-j2Upgrade pki-baseUpgrade jackson-databindUpgrade pki-serverUpgrade tomcatjssUpgrade xmlstreambufferUpgrade xerces-j2Upgrade pki-base-javaUpgrade relaxngDatatypeUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade jssUpgrade xml-commons-resolverUpgrade glassfish-fastinfosetUpgrade jackson-coreUpgrade apache-commons-langUpgrade jss-javadocUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade resteasyUpgrade xsomUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade jackson-annotationsUpgrade slf4jUpgrade apache-commons-netUpgrade pki-servlet-4.0-api | Jul 22, 2024 | Jun 23, 2020 |
| Redhat_linux | — | Upgrade apache-commons-netUpgrade xmlstreambufferUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade bea-stax-apiUpgrade ldapjdkUpgrade pki-baseUpgrade jss-javadocUpgrade python3-pkiUpgrade pki-core-debuginfoUpgrade relaxngDatatypeUpgrade pki-kraUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade xsomUpgrade pki-serverUpgrade pki-core-debugsourceUpgrade slf4j-jdk14Upgrade apache-commons-langUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade resteasyUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade jackson-databindUpgrade jackson-jaxrs-providersUpgrade jackson-jaxrs-json-providerUpgrade xerces-j2Upgrade stax-exUpgrade xalan-j2Upgrade python-nss-docUpgrade python3-nssUpgrade glassfish-fastinfosetUpgrade pki-symkey-debuginfoUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade jssUpgrade python3-nss-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade pki-base-javaUpgrade javassistUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade slf4jNo solution exists | Nov 5, 2020 | Jul 14, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nss | Mar 12, 2024 | Jul 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub