(RHSA-2023:1747) Important: pki-core:10.6 security update

2023-04-1218:10:53

access.redhat.com

pki core

security update

xxe vulnerability

cve-2022-2414

red hat certificate system

0.035 Low

EPSS

Percentile

91.6%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchpki-kra< 10.8.4-1.module+el8.2.0+17305+ef598deapki-kra-10.8.4-1.module+el8.2.0+17305+ef598dea.noarch.rpm
RedHatanyppc64lepki-symkey-debuginfo< 10.8.4-1.module+el8.2.0+17305+ef598deapki-symkey-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.ppc64le.rpm
RedHatanynoarchpki-server< 10.8.4-1.module+el8.2.0+17305+ef598deapki-server-10.8.4-1.module+el8.2.0+17305+ef598dea.noarch.rpm
RedHatanyx86_64jss< 4.6.2-12.module+el8.2.0+10554+cf83aa72jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64.rpm
RedHatanyppc64lejss< 4.6.2-12.module+el8.2.0+10554+cf83aa72jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.ppc64le.rpm
RedHatanyx86_64pki-core-debuginfo< 10.8.4-1.module+el8.2.0+17305+ef598deapki-core-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.x86_64.rpm
RedHatanyx86_64jss-debuginfo< 4.6.2-12.module+el8.2.0+10554+cf83aa72jss-debuginfo-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64.rpm
RedHatanyppc64lejss-javadoc< 4.6.2-12.module+el8.2.0+10554+cf83aa72jss-javadoc-4.6.2-12.module+el8.2.0+10554+cf83aa72.ppc64le.rpm
RedHatanyppc64lepki-core-debuginfo< 10.8.4-1.module+el8.2.0+17305+ef598deapki-core-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.ppc64le.rpm
RedHatanynoarchldapjdk< 4.21.0-2.module+el8.2.0+6294+b7db4606ldapjdk-4.21.0-2.module+el8.2.0+6294+b7db4606.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	pki-kra	< 10.8.4-1.module+el8.2.0+17305+ef598dea	pki-kra-10.8.4-1.module+el8.2.0+17305+ef598dea.noarch.rpm
RedHat	any	ppc64le	pki-symkey-debuginfo	< 10.8.4-1.module+el8.2.0+17305+ef598dea	pki-symkey-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.ppc64le.rpm
RedHat	any	noarch	pki-server	< 10.8.4-1.module+el8.2.0+17305+ef598dea	pki-server-10.8.4-1.module+el8.2.0+17305+ef598dea.noarch.rpm
RedHat	any	x86_64	jss	< 4.6.2-12.module+el8.2.0+10554+cf83aa72	jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64.rpm
RedHat	any	ppc64le	jss	< 4.6.2-12.module+el8.2.0+10554+cf83aa72	jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.ppc64le.rpm
RedHat	any	x86_64	pki-core-debuginfo	< 10.8.4-1.module+el8.2.0+17305+ef598dea	pki-core-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.x86_64.rpm
RedHat	any	x86_64	jss-debuginfo	< 4.6.2-12.module+el8.2.0+10554+cf83aa72	jss-debuginfo-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64.rpm
RedHat	any	ppc64le	jss-javadoc	< 4.6.2-12.module+el8.2.0+10554+cf83aa72	jss-javadoc-4.6.2-12.module+el8.2.0+10554+cf83aa72.ppc64le.rpm
RedHat	any	ppc64le	pki-core-debuginfo	< 10.8.4-1.module+el8.2.0+17305+ef598dea	pki-core-debuginfo-10.8.4-1.module+el8.2.0+17305+ef598dea.ppc64le.rpm
RedHat	any	noarch	ldapjdk	< 4.21.0-2.module+el8.2.0+6294+b7db4606	ldapjdk-4.21.0-2.module+el8.2.0+6294+b7db4606.noarch.rpm

Rows per page:

1-10 of 291

(RHSA-2023:1747) Important: pki-core:10.6 security update

Related