Red Hat Product Errata RHBA-2020:1078 - Bug Fix Advisory
Issued:
2020-03-31
Updated:
2020-03-31

RHBA-2020:1078 - Bug Fix Advisory

Synopsis

pki-core bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for pki-core is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1480301 - Key change operation fails using SCP03 v7 cards using AES encryption with HSM
  • BZ - 1597727 - CA - Unable to change a certificate’s revocation reason from superceded to key_compromised
  • BZ - 1602894 - CA - Check if tokenname is already in the nickname in SigningUnit class
  • BZ - 1723008 - ECC Key recovery failure with CKR_TEMPLATE_INCONSISTENT
  • BZ - 1729622 - pkidestroy is not working as expected when used with --force and --remove-logs
  • BZ - 1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL)
  • BZ - 1748766 - number range depletion when multiple clones created from same master
  • BZ - 1774282 - pki-server-nuxwdog template has pid file name with non-breakable space char encoded instead of 0x20 space char

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
x86_64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.x86_64.rpm SHA-256: fbe811a0c8f7460e173fbf99afec84fcf257ce993f04a926afda53054fab402d
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.x86_64.rpm SHA-256: 2e5be96859edface975075a2297fca3cde9236b6a3927ea5be1c5eaa37a840f9
pki-tools-10.5.17-6.el7.x86_64.rpm SHA-256: 9a358c5287fb0d27f615dcf84e07ba63831bce47f1c5c0706ab3ceed1e4e9972

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
x86_64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.x86_64.rpm SHA-256: fbe811a0c8f7460e173fbf99afec84fcf257ce993f04a926afda53054fab402d
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.x86_64.rpm SHA-256: 2e5be96859edface975075a2297fca3cde9236b6a3927ea5be1c5eaa37a840f9
pki-tools-10.5.17-6.el7.x86_64.rpm SHA-256: 9a358c5287fb0d27f615dcf84e07ba63831bce47f1c5c0706ab3ceed1e4e9972

Red Hat Enterprise Linux Workstation 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
x86_64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.x86_64.rpm SHA-256: fbe811a0c8f7460e173fbf99afec84fcf257ce993f04a926afda53054fab402d
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.x86_64.rpm SHA-256: 2e5be96859edface975075a2297fca3cde9236b6a3927ea5be1c5eaa37a840f9
pki-tools-10.5.17-6.el7.x86_64.rpm SHA-256: 9a358c5287fb0d27f615dcf84e07ba63831bce47f1c5c0706ab3ceed1e4e9972

Red Hat Enterprise Linux Desktop 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
x86_64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.x86_64.rpm SHA-256: fbe811a0c8f7460e173fbf99afec84fcf257ce993f04a926afda53054fab402d
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.x86_64.rpm SHA-256: 2e5be96859edface975075a2297fca3cde9236b6a3927ea5be1c5eaa37a840f9
pki-tools-10.5.17-6.el7.x86_64.rpm SHA-256: 9a358c5287fb0d27f615dcf84e07ba63831bce47f1c5c0706ab3ceed1e4e9972

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
s390x
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.s390x.rpm SHA-256: 130e68be57c9105b2524ea2146777337f3eea9ca95fb70b2f995fc6899807de3
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.s390x.rpm SHA-256: 81dd0aa188dc77c47a94c01e8c162d71d80f7e7bf62d13a634c362d21ecc1642
pki-tools-10.5.17-6.el7.s390x.rpm SHA-256: 91fc1da400c55aad01612282d9299be1c522275fde50cfac06b7b7caeec1733d

Red Hat Enterprise Linux for Power, big endian 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
ppc64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.ppc64.rpm SHA-256: a77d04a7306d85979e0ddbc5d6cb5dc50e0bb4f7f8198d60238e3343885b32c9
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.ppc64.rpm SHA-256: d69ba06b5709a3f2ab06de5acf37f2eb31b9ba0cb672a92cf2dfa3b59357340c
pki-tools-10.5.17-6.el7.ppc64.rpm SHA-256: 67e9c063c004a79e8a06d9a6bc0b5486ba8d0984570713b8a8c2c69779af429e

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
x86_64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.x86_64.rpm SHA-256: fbe811a0c8f7460e173fbf99afec84fcf257ce993f04a926afda53054fab402d
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.x86_64.rpm SHA-256: 2e5be96859edface975075a2297fca3cde9236b6a3927ea5be1c5eaa37a840f9
pki-tools-10.5.17-6.el7.x86_64.rpm SHA-256: 9a358c5287fb0d27f615dcf84e07ba63831bce47f1c5c0706ab3ceed1e4e9972

Red Hat Enterprise Linux for Power, little endian 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
ppc64le
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.ppc64le.rpm SHA-256: 62e5037ab73e30871dcad1e2d985880d41b5c8d90a4a5b9dbc21e02ceca6a371
pki-core-debuginfo-10.5.17-6.el7.ppc64le.rpm SHA-256: 62e5037ab73e30871dcad1e2d985880d41b5c8d90a4a5b9dbc21e02ceca6a371
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.ppc64le.rpm SHA-256: 7c455058021ad7e58bc2fcf903732c472277c4a02e6fe700f4ba9bcaa4c449f5
pki-tools-10.5.17-6.el7.ppc64le.rpm SHA-256: 3fd934920c70680adbbdb8e170a4453d966cda004a53ea8f6a662c179b6fc9bc

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
s390x
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.s390x.rpm SHA-256: 130e68be57c9105b2524ea2146777337f3eea9ca95fb70b2f995fc6899807de3
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.s390x.rpm SHA-256: 81dd0aa188dc77c47a94c01e8c162d71d80f7e7bf62d13a634c362d21ecc1642
pki-tools-10.5.17-6.el7.s390x.rpm SHA-256: 91fc1da400c55aad01612282d9299be1c522275fde50cfac06b7b7caeec1733d

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
ppc64
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.ppc64.rpm SHA-256: a77d04a7306d85979e0ddbc5d6cb5dc50e0bb4f7f8198d60238e3343885b32c9
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.ppc64.rpm SHA-256: d69ba06b5709a3f2ab06de5acf37f2eb31b9ba0cb672a92cf2dfa3b59357340c
pki-tools-10.5.17-6.el7.ppc64.rpm SHA-256: 67e9c063c004a79e8a06d9a6bc0b5486ba8d0984570713b8a8c2c69779af429e

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
pki-core-10.5.17-6.el7.src.rpm SHA-256: 93099650d5708043b07790b395194c0707631ad0286e7cba0992898662b76318
ppc64le
pki-base-10.5.17-6.el7.noarch.rpm SHA-256: 5e1cfe3982d16471b817c15577146d139e188e8384a6b03e28e18e10f20a1067
pki-base-java-10.5.17-6.el7.noarch.rpm SHA-256: e648efd0497c482abbe399499bfffd18f1f79aa106e7373a5660d0c30554bac4
pki-ca-10.5.17-6.el7.noarch.rpm SHA-256: 9f101272093b4080cfe0f8902f8f2d59bd234b995c960cfb18da17777e832889
pki-core-debuginfo-10.5.17-6.el7.ppc64le.rpm SHA-256: 62e5037ab73e30871dcad1e2d985880d41b5c8d90a4a5b9dbc21e02ceca6a371
pki-core-debuginfo-10.5.17-6.el7.ppc64le.rpm SHA-256: 62e5037ab73e30871dcad1e2d985880d41b5c8d90a4a5b9dbc21e02ceca6a371
pki-javadoc-10.5.17-6.el7.noarch.rpm SHA-256: b97db969ee4ec8a6a5f0f4d4c24eb88b403c1b6572741a8632f08b392c48739d
pki-kra-10.5.17-6.el7.noarch.rpm SHA-256: 4f572b347049494cc04725958a103b4415303c4537729d024c1983a53f63f22d
pki-server-10.5.17-6.el7.noarch.rpm SHA-256: 3faa153cccd84f660fe310b319055bf1cbbcef137f212c023117b45f1575503f
pki-symkey-10.5.17-6.el7.ppc64le.rpm SHA-256: 7c455058021ad7e58bc2fcf903732c472277c4a02e6fe700f4ba9bcaa4c449f5
pki-tools-10.5.17-6.el7.ppc64le.rpm SHA-256: 3fd934920c70680adbbdb8e170a4453d966cda004a53ea8f6a662c179b6fc9bc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.