RHBA-2011:1842 - Bug Fix Advisory

Topic

An updated certmonger package that fixes one bug is now available for Red Hat
Enterprise Linux 5.

[Updated 20 December 2011]
This advisory has been updated with the correct product name (that is, Red Hat
Enterprise Linux 5) in the Details section. The package included in this revised
update has not been changed in any way from the package included in the original
advisory.

Description

The certmonger service monitors certificates, warning of their impending
expiration, and optionally attempting to re-enroll with supported CAs
(Certificate Authorities).

This update fixes the following bug:

• The RHSA-2011-1533 security advisory, which fixed a security vulnerability in

the IPA (Identity, Policy and Audit) web-based service, caused incompatibility
with older versions of certmonger. As a consequence, certmonger was unable to
correctly submit enrollment requests to IPA's CA. With this update, certmonger
has been modified and it now operates correctly with newer versions of IPA.
Interoperability with older versions of IPA remains unaffected. (BZ#767573)

All users of certmonger are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 767573 - certmonger: Requires client-side changes for server-side fixes (due to CVE-2011-3636) [rhel-5.7.z]

CVEs

(none)

References

(none)