RHSA-2021:0966: Important: pki-core:10.6 security update
Published Mar 23, 2021
·Updated
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.Security Fix(es): pki-core: Unprivileged users can renew any certificate (CVE-2021-20179) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
52 affected componentsFixes available
redhat/jss<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/ldapjdk<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/pki-core<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/tomcatjss<7.5.0-1.module+el8.3.0+7355+c59bcbd9
7.5.0-1.module+el8.3.0+7355+c59bcbd9
redhat/ldapjdk<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/ldapjdk-javadoc<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/pki-base<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-base-java<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-ca<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-kra<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-server<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/python3-pki<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/tomcatjss<7.5.0-1.module+el8.3.0+7355+c59bcbd9
7.5.0-1.module+el8.3.0+7355+c59bcbd9
redhat/jss<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-debuginfo<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-debugsource<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-javadoc<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/pki-core-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-core-debugsource<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/jss-debuginfo<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-debugsource<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-javadoc<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/pki-core-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-core-debugsource<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/jss<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-debuginfo<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-debugsource<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/jss-javadoc<4.7.3-1.module+el8.3.0+8058+d5cd4219
4.7.3-1.module+el8.3.0+8058+d5cd4219
redhat/pki-core-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-core-debugsource<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-symkey-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/pki-tools-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b
10.9.4-3.module+el8.3.0+10353+73f6df5b
redhat/jss<4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
redhat/jss-debuginfo<4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
redhat/jss-debugsource<4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
redhat/jss-javadoc<4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
4.7.3-1.module+el8.3.0+8058+d5cd4219.aa
redhat/pki-core-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
redhat/pki-core-debugsource<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
redhat/pki-symkey<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
redhat/pki-symkey-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
redhat/pki-tools<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
redhat/pki-tools-debuginfo<10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
10.9.4-3.module+el8.3.0+10353+73f6df5b.aa
Remediation
Event History
Dec 25, 2025
Advisory Published
via Red Hat·04:43 PM
Data Sourced
via Red Hat·04:43 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2021:0966?
The severity of RHSA-2021:0966 is classified as important.
2
How do I fix RHSA-2021:0966?
To fix RHSA-2021:0966, update the affected packages to the versions specified in the advisory.
3
What packages are affected by RHSA-2021:0966?
RHSA-2021:0966 affects several packages including pki-core, jss, and ldapjdk.
4
What vulnerability is addressed in RHSA-2021:0966?
This advisory addresses a vulnerability that allows unprivileged users to renew any certificate (CVE-2021-20179).
5
Is RHSA-2021:0966 applicable to all Red Hat systems?
RHSA-2021:0966 is applicable specifically to Red Hat Enterprise Linux version 8 systems with the affected packages.