Foreman and CVE-2021-44228

Blog
1

Foreman and the common projects it interacts with are not impacted by CVE-2021-44228. For those who are more curious, here are the details!

This is a companion discussion topic for the original entry at https://theforeman.org/2021/12/the-foreman-ecosystem-and-cve-2021-44228.html
4 Likes
2

For the record since I was quite confused and @evgeni had to navigate me through this:

The latest version of Tomcat in RHEL8 / CentOS8 / Stream is:

9.0.30-3.module+el8.5.0+11388+9e95fe00.noarch.rpm

https://access.redhat.com/downloads/content/pki-servlet-engine/9.0.30-3.module+el8.5.0+11388+9e95fe00/noarch/fd431d51/package

Beware that tomcat is actually named pki-servlet-engine. Spent some time digging tomcat in extra repos and appstreams…

1 Like