RHSA-2009:0006Medium

Red Hat Security Advisory: rhpki security and bug fix update

Published
January 15, 2009
Last Modified
November 21, 2025

🔗 CVE IDs covered (2)

CVE-2008-2367 →CVE-2008-2368 →

📋 Description

CVE-2008-2367 — System: insecure config file permissions CVE-2008-2368 — System: plain text passwords stored in debug log

🎯 Affected products18

  • Red Hat Certificate System 7.2 for 4AS
  • Red Hat Certificate System 7.2 for 4ES
  • pkisetup-0:7.2.0-7.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • pkisetup-0:7.2.0-7.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-ca-0:7.2.0-6.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-ca-0:7.2.0-6.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-common-0:7.2.0-16.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-common-0:7.2.0-16.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-kra-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-kra-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-ocsp-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-ocsp-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-tks-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-tks-0:7.2.0-5.noarch as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-tps-0:7.2.0-8.i386 as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-tps-0:7.2.0-8.i386 as a component of Red Hat Certificate System 7.2 for 4ES
  • rhpki-tps-0:7.2.0-8.x86_64 as a component of Red Hat Certificate System 7.2 for 4AS
  • rhpki-tps-0:7.2.0-8.x86_64 as a component of Red Hat Certificate System 7.2 for 4ES

✅ Remediation

Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages in .pkg format are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. These packages should be installed/upgraded using Solaris native package management tools. Refer to the Red Hat Certificate System Administration Guide for installation instructions: http://www.redhat.com/docs/manuals/cert-system/

🔗 References (5)