Register | Log in

dogtag-pki

Dogtag Public Key Infrastructure (PKI) Suite

Choose email to subscribe with

general

source: dogtag-pki (main)
version: 10.10.2-1
maintainer: Debian FreeIPA Team (archive) (DMD)
uploaders: Timo Aaltonen [DMD]
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

testing: 10.10.2-1
unstable: 10.10.2-1

versioned links

10.10.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

dogtag-pki
dogtag-pki-console-theme
dogtag-pki-server-theme
libsymkey-java
libsymkey-jni
pki-base
pki-base-java
pki-ca
pki-console
pki-javadoc
pki-kra
pki-ocsp
pki-server
pki-tks
pki-tools
pki-tps
pki-tps-client
python3-pki-base

action needed

A new upstream version is available: 10.10.3 high

A new upstream version 10.10.3 is available, you should consider packaging it.

Created: 2021-01-17 Last update: 2021-01-20 16:04

3 security issues in sid high

There are 3 open security issues in sid.

3 important issues:

CVE-2019-10178: It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser. All versions of pki-core are believed to be vulnerable.
CVE-2019-10180: A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.
CVE-2020-1696: A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

Please fix them.

Created: 2020-02-06 Last update: 2020-12-20 05:36

3 security issues in bullseye high

There are 3 open security issues in bullseye.

3 important issues:

CVE-2019-10178: It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser. All versions of pki-core are believed to be vulnerable.
CVE-2019-10180: A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.
CVE-2020-1696: A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

Please fix them.

Created: 2020-09-23 Last update: 2020-12-20 05:36

lintian reports 47 warnings normal

Lintian reports 47 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-09-21 06:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.1 instead of 4.5.0).

Created: 2020-11-17 Last update: 2020-12-17 01:09

news

[2020-12-20] dogtag-pki 10.10.2-1 MIGRATED to testing (Debian testing watch)
[2020-12-20] dogtag-pki 10.10.2-1 MIGRATED to testing (Debian testing watch)
[2020-12-16] Accepted dogtag-pki 10.10.2-1 (source) into unstable (Timo Aaltonen)
[2020-12-09] dogtag-pki 10.10.1-1 MIGRATED to testing (Debian testing watch)
[2020-12-06] Accepted dogtag-pki 10.10.1-1 (source) into unstable (Timo Aaltonen)
[2020-11-07] dogtag-pki 10.10.0-1 MIGRATED to testing (Debian testing watch)
[2020-11-02] Accepted dogtag-pki 10.10.0-1 (source) into unstable (Timo Aaltonen)
[2020-09-23] dogtag-pki 10.9.4-1 MIGRATED to testing (Debian testing watch)
[2020-09-17] Accepted dogtag-pki 10.9.4-1 (source) into unstable (Timo Aaltonen)
[2020-08-24] Accepted dogtag-pki 10.9.2-1 (source) into unstable (Timo Aaltonen)
[2020-08-14] Accepted dogtag-pki 10.9.1-2 (source) into unstable (Timo Aaltonen)
[2020-08-14] Accepted dogtag-pki 10.9.1-1 (source) into unstable (Timo Aaltonen)
[2020-06-17] Accepted dogtag-pki 10.9.0~a2-2 (source) into experimental (Timo Aaltonen)
[2020-06-16] Accepted dogtag-pki 10.9.0~a2-1 (source) into experimental (Timo Aaltonen)
[2020-05-27] Accepted dogtag-pki 10.9.0~a1-1 (source) into experimental (Timo Aaltonen)
[2020-03-30] Accepted dogtag-pki 10.8.3-2 (source) into unstable (Timo Aaltonen)
[2020-03-17] Accepted dogtag-pki 10.8.3-1 (source) into unstable (Timo Aaltonen)
[2020-02-08] Accepted dogtag-pki 10.7.4-2 (source) into unstable (Timo Aaltonen)
[2020-02-06] Accepted dogtag-pki 10.7.4-1 (source) into unstable (Timo Aaltonen)
[2019-09-17] Accepted dogtag-pki 10.7.3-4 (source) into unstable (Timo Aaltonen)
[2019-09-13] Accepted dogtag-pki 10.7.3-3 (source) into unstable (Timo Aaltonen)
[2019-09-11] Accepted dogtag-pki 10.7.3-2 (source) into unstable (Timo Aaltonen)
[2019-08-09] Accepted dogtag-pki 10.7.3-1 (source) into experimental (Timo Aaltonen)
[2019-07-29] Accepted dogtag-pki 10.6.10-2 (source) into unstable (Timo Aaltonen)
[2019-07-19] Accepted dogtag-pki 10.6.10-1 (source) into unstable (Timo Aaltonen)
[2019-03-15] dogtag-pki REMOVED from testing (Debian testing watch)
[2019-01-09] dogtag-pki 10.6.8-2 MIGRATED to testing (Debian testing watch)
[2018-12-07] Accepted dogtag-pki 10.6.8-2 (source) into unstable (Timo Aaltonen)
[2018-12-05] Accepted dogtag-pki 10.6.8-1 (source) into unstable (Timo Aaltonen)
[2018-10-09] Accepted dogtag-pki 10.6.7-1 (source) into unstable (Timo Aaltonen)

1
2

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 47)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 10.10.2-1
2 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing