(RHSA-2022:7470) Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update

2022-11-0806:20:23

access.redhat.com

pki-core

pki-deps

security fix

xxe vulnerability

red hat certificate system

cve-2022-2414

0.035 Low

EPSS

Percentile

91.6%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchrelaxngdatatype< 2011.1-7.module+el8.1.0+3366+6dfb954crelaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchstax-ex< 1.7.7-8.module+el8.2.0+5723+4574fbffstax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.noarch.rpm
RedHatanyaarch64python-nss-debugsource< 1.0.1-10.module+el8.1.0+3366+6dfb954cpython-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64.rpm
RedHatanynoarchresteasy< 3.0.26-6.module+el8.4.0+8891+bb8828efresteasy-3.0.26-6.module+el8.4.0+8891+bb8828ef.noarch.rpm
RedHatanys390xjss-debuginfo< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-debuginfo-4.9.4-1.module+el8.7.0+15532+95bac9ee.s390x.rpm
RedHatanyppc64lejss-javadoc< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-javadoc-4.9.4-1.module+el8.7.0+15532+95bac9ee.ppc64le.rpm
RedHatanynoarchxml-commons-resolver< 1.2-26.module+el8.1.0+3366+6dfb954cxml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchglassfish-jaxb-api< 2.2.12-8.module+el8.1.0+3366+6dfb954cglassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchglassfish-jaxb-core< 2.2.11-11.module+el8.1.0+3366+6dfb954cglassfish-jaxb-core-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanyppc64lejss< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-4.9.4-1.module+el8.7.0+15532+95bac9ee.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	relaxngdatatype	< 2011.1-7.module+el8.1.0+3366+6dfb954c	relaxngDatatype-2011.1-7.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	stax-ex	< 1.7.7-8.module+el8.2.0+5723+4574fbff	stax-ex-1.7.7-8.module+el8.2.0+5723+4574fbff.noarch.rpm
RedHat	any	aarch64	python-nss-debugsource	< 1.0.1-10.module+el8.1.0+3366+6dfb954c	python-nss-debugsource-1.0.1-10.module+el8.1.0+3366+6dfb954c.aarch64.rpm
RedHat	any	noarch	resteasy	< 3.0.26-6.module+el8.4.0+8891+bb8828ef	resteasy-3.0.26-6.module+el8.4.0+8891+bb8828ef.noarch.rpm
RedHat	any	s390x	jss-debuginfo	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-debuginfo-4.9.4-1.module+el8.7.0+15532+95bac9ee.s390x.rpm
RedHat	any	ppc64le	jss-javadoc	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-javadoc-4.9.4-1.module+el8.7.0+15532+95bac9ee.ppc64le.rpm
RedHat	any	noarch	xml-commons-resolver	< 1.2-26.module+el8.1.0+3366+6dfb954c	xml-commons-resolver-1.2-26.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	glassfish-jaxb-api	< 2.2.12-8.module+el8.1.0+3366+6dfb954c	glassfish-jaxb-api-2.2.12-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	glassfish-jaxb-core	< 2.2.11-11.module+el8.1.0+3366+6dfb954c	glassfish-jaxb-core-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	ppc64le	jss	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-4.9.4-1.module+el8.7.0+15532+95bac9ee.ppc64le.rpm