exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2015-1347-01

Red Hat Security Advisory 2015-1347-01
Posted Jul 22, 2015
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-1347-01 - Red Hat Certificate System is an enterprise software system designed to manage enterprise public key infrastructure deployments. PKI Core contains fundamental packages required by Red Hat Certificate System, which comprise the Certificate Authority subsystem. Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System Agent and End Entity pages. An attacker could use these flaws to perform a cross-site scripting attack against victims using the Certificate System's web interface.

tags | advisory, web, xss
systems | linux, redhat
advisories | CVE-2012-2662
SHA-256 | 1bb6fac126d70d90824254f7e4c907a2edb6ed2e4c8f6d047dc7c0a0b16ee4ba

Red Hat Security Advisory 2015-1347-01

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: pki-core security and bug fix update
Advisory ID: RHSA-2015:1347-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1347.html
Issue date: 2015-07-22
Updated on: 2015-02-24
CVE Names: CVE-2012-2662
=====================================================================

1. Summary:

Updated pki-core packages that fix one security issue and several bugs are
now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, noarch, x86_64
Red Hat Enterprise Linux HPC Node Optional (v. 6) - noarch, x86_64
Red Hat Enterprise Linux Server (v. 6) - i386, noarch, x86_64
Red Hat Enterprise Linux Server Optional (v. 6) - noarch
Red Hat Enterprise Linux Workstation (v. 6) - i386, noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 6) - noarch

3. Description:

Red Hat Certificate System is an enterprise software system designed to
manage enterprise public key infrastructure (PKI) deployments. PKI Core
contains fundamental packages required by Red Hat Certificate System, which
comprise the Certificate Authority (CA) subsystem.

Multiple cross-site scripting flaws were discovered in the Red Hat
Certificate System Agent and End Entity pages. An attacker could use these
flaws to perform a cross-site scripting (XSS) attack against victims using
the Certificate System's web interface. (CVE-2012-2662)

This update also fixes the following bugs:

* Previously, pki-core required the SSL version 3 (SSLv3) protocol ranges
to communicate with the 389-ds-base packages. However, recent changes to
389-ds-base disabled the default use of SSLv3 and enforced using protocol
ranges supported by secure protocols, such as the TLS protocol. As a
consequence, the CA failed to install during an Identity Management (IdM)
server installation. This update adds TLS-related parameters to the
server.xml file of the CA to fix this problem, and running the
ipa-server-install command now installs the CA as expected. (BZ#1171848)

* Previously, the ipa-server-install script failed when attempting to
configure a stand-alone CA on systems with OpenJDK version 1.8.0 installed.
The pki-core build and runtime dependencies have been modified to use
OpenJDK version 1.7.0 during the stand-alone CA configuration. As a result,
ipa-server-install no longer fails in this situation. (BZ#1212557)

* Creating a Red Hat Enterprise Linux 7 replica from a Red Hat Enterprise
Linux 6 replica running the CA service sometimes failed in IdM deployments
where the initial Red Hat Enterprise Linux 6 CA master had been removed.
This could cause problems in some situations, such as when migrating from
Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7. The bug occurred
due to a problem in a previous version of IdM where the subsystem user,
created during the initial CA server installation, was removed together
with the initial master. This update adds the restore-subsystem-user.py
script that restores the subsystem user in the described situation, thus
enabling administrators to create a Red Hat Enterprise Linux 7 replica in
this scenario. (BZ#1225589)

* Several Java import statements specify wildcard arguments. However, due
to the use of wildcard arguments in the import statements of the source
code contained in the Red Hat Enterprise Linux 6 maintenance branch, a name
space collision created the potential for an incorrect class to be
utilized. As a consequence, the Token Processing System (TPS) rebuild test
failed with an error message. This update addresses the bug by supplying
the fully named class in all of the affected areas, and the TPS rebuild
test no longer fails. (BZ#1144188)

* Previously, pki-core failed to build with the rebased version of the
CMake build system during the TPS rebuild test. The pki-core build files
have been updated to comply with the rebased version of CMake. As a result,
pki-core builds successfully in the described scenario. (BZ#1144608)

Users of pki-core are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

826646 - CVE-2012-2662 Certificate System: multiple XSS flaws
1144188 - TPS tests: RPM rebuild failure due to wildcard imports
1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist

6. Package List:

Red Hat Enterprise Linux Desktop Optional (v. 6):

Source:
pki-core-9.0.3-43.el6.src.rpm

i386:
pki-core-debuginfo-9.0.3-43.el6.i686.rpm
pki-native-tools-9.0.3-43.el6.i686.rpm
pki-symkey-9.0.3-43.el6.i686.rpm

noarch:
pki-ca-9.0.3-43.el6.noarch.rpm
pki-common-9.0.3-43.el6.noarch.rpm
pki-common-javadoc-9.0.3-43.el6.noarch.rpm
pki-java-tools-9.0.3-43.el6.noarch.rpm
pki-java-tools-javadoc-9.0.3-43.el6.noarch.rpm
pki-selinux-9.0.3-43.el6.noarch.rpm
pki-setup-9.0.3-43.el6.noarch.rpm
pki-silent-9.0.3-43.el6.noarch.rpm
pki-util-9.0.3-43.el6.noarch.rpm
pki-util-javadoc-9.0.3-43.el6.noarch.rpm

x86_64:
pki-core-debuginfo-9.0.3-43.el6.x86_64.rpm
pki-native-tools-9.0.3-43.el6.x86_64.rpm
pki-symkey-9.0.3-43.el6.x86_64.rpm

Red Hat Enterprise Linux HPC Node Optional (v. 6):

Source:
pki-core-9.0.3-43.el6.src.rpm

noarch:
pki-ca-9.0.3-43.el6.noarch.rpm
pki-common-9.0.3-43.el6.noarch.rpm
pki-common-javadoc-9.0.3-43.el6.noarch.rpm
pki-java-tools-9.0.3-43.el6.noarch.rpm
pki-java-tools-javadoc-9.0.3-43.el6.noarch.rpm
pki-selinux-9.0.3-43.el6.noarch.rpm
pki-setup-9.0.3-43.el6.noarch.rpm
pki-silent-9.0.3-43.el6.noarch.rpm
pki-util-9.0.3-43.el6.noarch.rpm
pki-util-javadoc-9.0.3-43.el6.noarch.rpm

x86_64:
pki-core-debuginfo-9.0.3-43.el6.x86_64.rpm
pki-native-tools-9.0.3-43.el6.x86_64.rpm
pki-symkey-9.0.3-43.el6.x86_64.rpm

Red Hat Enterprise Linux Server (v. 6):

Source:
pki-core-9.0.3-43.el6.src.rpm

i386:
pki-core-debuginfo-9.0.3-43.el6.i686.rpm
pki-native-tools-9.0.3-43.el6.i686.rpm
pki-symkey-9.0.3-43.el6.i686.rpm

noarch:
pki-ca-9.0.3-43.el6.noarch.rpm
pki-common-9.0.3-43.el6.noarch.rpm
pki-java-tools-9.0.3-43.el6.noarch.rpm
pki-selinux-9.0.3-43.el6.noarch.rpm
pki-setup-9.0.3-43.el6.noarch.rpm
pki-silent-9.0.3-43.el6.noarch.rpm
pki-util-9.0.3-43.el6.noarch.rpm

x86_64:
pki-core-debuginfo-9.0.3-43.el6.x86_64.rpm
pki-native-tools-9.0.3-43.el6.x86_64.rpm
pki-symkey-9.0.3-43.el6.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 6):

noarch:
pki-common-javadoc-9.0.3-43.el6.noarch.rpm
pki-java-tools-javadoc-9.0.3-43.el6.noarch.rpm
pki-util-javadoc-9.0.3-43.el6.noarch.rpm

Red Hat Enterprise Linux Workstation (v. 6):

Source:
pki-core-9.0.3-43.el6.src.rpm

i386:
pki-core-debuginfo-9.0.3-43.el6.i686.rpm
pki-native-tools-9.0.3-43.el6.i686.rpm
pki-symkey-9.0.3-43.el6.i686.rpm

noarch:
pki-ca-9.0.3-43.el6.noarch.rpm
pki-common-9.0.3-43.el6.noarch.rpm
pki-java-tools-9.0.3-43.el6.noarch.rpm
pki-selinux-9.0.3-43.el6.noarch.rpm
pki-setup-9.0.3-43.el6.noarch.rpm
pki-silent-9.0.3-43.el6.noarch.rpm
pki-util-9.0.3-43.el6.noarch.rpm

x86_64:
pki-core-debuginfo-9.0.3-43.el6.x86_64.rpm
pki-native-tools-9.0.3-43.el6.x86_64.rpm
pki-symkey-9.0.3-43.el6.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 6):

noarch:
pki-common-javadoc-9.0.3-43.el6.noarch.rpm
pki-java-tools-javadoc-9.0.3-43.el6.noarch.rpm
pki-util-javadoc-9.0.3-43.el6.noarch.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2012-2662
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFVrzXHXlSAg2UNWIIRAvpCAJsHtzcKWY+v0Y9O97lmN9zkgb7kPQCgomXE
3FtdW0kth7ZkdqvhK2D8bEw=
=2C6k
-----END PGP SIGNATURE-----


--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
Login or Register to add favorites

File Archive:

February 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    11 Files
  • 2
    Feb 2nd
    9 Files
  • 3
    Feb 3rd
    5 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    0 Files
  • 6
    Feb 6th
    0 Files
  • 7
    Feb 7th
    0 Files
  • 8
    Feb 8th
    0 Files
  • 9
    Feb 9th
    0 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    0 Files
  • 13
    Feb 13th
    0 Files
  • 14
    Feb 14th
    0 Files
  • 15
    Feb 15th
    0 Files
  • 16
    Feb 16th
    0 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    0 Files
  • 20
    Feb 20th
    0 Files
  • 21
    Feb 21st
    0 Files
  • 22
    Feb 22nd
    0 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    0 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close