(RHSA-2023:1966) Important: pki-core:10.6 security update

2023-04-2508:12:54

access.redhat.com

rhsa-2023-1966

security update

pki core

xxe

cve-2022-2414

unix

0.035 Low

EPSS

Percentile

91.6%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64pki-tools-debuginfo< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-tools-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.x86_64.rpm
RedHatanys390xpki-core-debugsource< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-core-debugsource-10.10.5-6.module+el8.4.0+17580+3370c7a3.s390x.rpm
RedHatanynoarchpki-base-java< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-base-java-10.10.5-6.module+el8.4.0+17580+3370c7a3.noarch.rpm
RedHatanyppc64lepki-core-debugsource< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-core-debugsource-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHatanyppc64lepki-symkey-debuginfo< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-symkey-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHatanyppc64lepki-core-debuginfo< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-core-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHatanyaarch64jss-debuginfo< 4.8.1-2.module+el8.4.0+10451+3e5b5448jss-debuginfo-4.8.1-2.module+el8.4.0+10451+3e5b5448.aarch64.rpm
RedHatanys390xpki-symkey-debuginfo< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-symkey-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.s390x.rpm
RedHatanyx86_64pki-symkey< 10.10.5-6.module+el8.4.0+17580+3370c7a3pki-symkey-10.10.5-6.module+el8.4.0+17580+3370c7a3.x86_64.rpm
RedHatanys390xjss-debugsource< 4.8.1-2.module+el8.4.0+10451+3e5b5448jss-debugsource-4.8.1-2.module+el8.4.0+10451+3e5b5448.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	pki-tools-debuginfo	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-tools-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.x86_64.rpm
RedHat	any	s390x	pki-core-debugsource	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-core-debugsource-10.10.5-6.module+el8.4.0+17580+3370c7a3.s390x.rpm
RedHat	any	noarch	pki-base-java	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-base-java-10.10.5-6.module+el8.4.0+17580+3370c7a3.noarch.rpm
RedHat	any	ppc64le	pki-core-debugsource	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-core-debugsource-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHat	any	ppc64le	pki-symkey-debuginfo	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-symkey-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHat	any	ppc64le	pki-core-debuginfo	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-core-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.ppc64le.rpm
RedHat	any	aarch64	jss-debuginfo	< 4.8.1-2.module+el8.4.0+10451+3e5b5448	jss-debuginfo-4.8.1-2.module+el8.4.0+10451+3e5b5448.aarch64.rpm
RedHat	any	s390x	pki-symkey-debuginfo	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-symkey-debuginfo-10.10.5-6.module+el8.4.0+17580+3370c7a3.s390x.rpm
RedHat	any	x86_64	pki-symkey	< 10.10.5-6.module+el8.4.0+17580+3370c7a3	pki-symkey-10.10.5-6.module+el8.4.0+17580+3370c7a3.x86_64.rpm
RedHat	any	s390x	jss-debugsource	< 4.8.1-2.module+el8.4.0+10451+3e5b5448	jss-debugsource-4.8.1-2.module+el8.4.0+10451+3e5b5448.s390x.rpm