ELSA-2022-8799

ELSA-2022-8799 - pki-core security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-12-06

Description

[10.5.18-24]
- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
entities when parsing XML can lead to XXE [certificate_system_9.7.z]
(ckelley, mharmsen)

Related CVEs

CVE-2022-2414

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_aarch64_latest
	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_aarch64_optional_latest
	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-base-10.5.18-24.el7_9.noarch.rpm	e92b05d31a2b086fff6d9821e0654c1ef857a0f030172adb91a83cf562eb9046	ELSA-2024-4222	ol7_aarch64_latest
	pki-base-10.5.18-24.el7_9.noarch.rpm	e92b05d31a2b086fff6d9821e0654c1ef857a0f030172adb91a83cf562eb9046	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-base-java-10.5.18-24.el7_9.noarch.rpm	437b9c726219f3aeb79840b90321ab7b9b7e3779206dae496bf6663f2e54406e	ELSA-2024-4222	ol7_aarch64_latest
	pki-base-java-10.5.18-24.el7_9.noarch.rpm	437b9c726219f3aeb79840b90321ab7b9b7e3779206dae496bf6663f2e54406e	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-ca-10.5.18-24.el7_9.noarch.rpm	9a5d9c62d44af6552a77a126dca39e4f5c752467d86c94f253d7a19c0fbc5d21	ELSA-2024-4222	ol7_aarch64_latest
	pki-ca-10.5.18-24.el7_9.noarch.rpm	9a5d9c62d44af6552a77a126dca39e4f5c752467d86c94f253d7a19c0fbc5d21	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-javadoc-10.5.18-24.el7_9.noarch.rpm	1fb6c50f0754ffbcbff7d5c1968f7da7ff41979cae9f745e814bf2b0beda673b	ELSA-2024-4222	ol7_aarch64_optional_latest
	pki-kra-10.5.18-24.el7_9.noarch.rpm	6b0827a08d959a148cbdd2f05886a8f028f401b1fef2edca626cb219bd45145d	ELSA-2024-4222	ol7_aarch64_latest
	pki-kra-10.5.18-24.el7_9.noarch.rpm	6b0827a08d959a148cbdd2f05886a8f028f401b1fef2edca626cb219bd45145d	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-server-10.5.18-24.el7_9.noarch.rpm	8fb4524a1e486615354ce319c4e76cfaf1e88e0623be8ac5100a1996f7fefabe	ELSA-2024-4222	ol7_aarch64_latest
	pki-server-10.5.18-24.el7_9.noarch.rpm	8fb4524a1e486615354ce319c4e76cfaf1e88e0623be8ac5100a1996f7fefabe	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-symkey-10.5.18-24.el7_9.aarch64.rpm	693e7d5cc22baff48e7d5ef565c21833541ae6b1be25268f96ee05f842f4ecda	ELSA-2024-4222	ol7_aarch64_latest
	pki-symkey-10.5.18-24.el7_9.aarch64.rpm	693e7d5cc22baff48e7d5ef565c21833541ae6b1be25268f96ee05f842f4ecda	ELSA-2024-4222	ol7_aarch64_u9_patch
	pki-tools-10.5.18-24.el7_9.aarch64.rpm	7e0baf727c97065d8c5ef424536bdec6cdaca2fb66b338f00547dcf6439e6423	ELSA-2024-4222	ol7_aarch64_latest
	pki-tools-10.5.18-24.el7_9.aarch64.rpm	7e0baf727c97065d8c5ef424536bdec6cdaca2fb66b338f00547dcf6439e6423	ELSA-2024-4222	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_x86_64_latest
	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_x86_64_optional_latest
	pki-core-10.5.18-24.el7_9.src.rpm	19a96d48c03770b99b935841a6f87d32ca4ebf072164daa08447e97330830280	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-base-10.5.18-24.el7_9.noarch.rpm	e92b05d31a2b086fff6d9821e0654c1ef857a0f030172adb91a83cf562eb9046	ELSA-2024-4222	ol7_x86_64_latest
	pki-base-10.5.18-24.el7_9.noarch.rpm	e92b05d31a2b086fff6d9821e0654c1ef857a0f030172adb91a83cf562eb9046	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-base-java-10.5.18-24.el7_9.noarch.rpm	437b9c726219f3aeb79840b90321ab7b9b7e3779206dae496bf6663f2e54406e	ELSA-2024-4222	ol7_x86_64_latest
	pki-base-java-10.5.18-24.el7_9.noarch.rpm	437b9c726219f3aeb79840b90321ab7b9b7e3779206dae496bf6663f2e54406e	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-ca-10.5.18-24.el7_9.noarch.rpm	9a5d9c62d44af6552a77a126dca39e4f5c752467d86c94f253d7a19c0fbc5d21	ELSA-2024-4222	ol7_x86_64_latest
	pki-ca-10.5.18-24.el7_9.noarch.rpm	9a5d9c62d44af6552a77a126dca39e4f5c752467d86c94f253d7a19c0fbc5d21	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-javadoc-10.5.18-24.el7_9.noarch.rpm	1fb6c50f0754ffbcbff7d5c1968f7da7ff41979cae9f745e814bf2b0beda673b	ELSA-2024-4222	ol7_x86_64_optional_latest
	pki-kra-10.5.18-24.el7_9.noarch.rpm	6b0827a08d959a148cbdd2f05886a8f028f401b1fef2edca626cb219bd45145d	ELSA-2024-4222	ol7_x86_64_latest
	pki-kra-10.5.18-24.el7_9.noarch.rpm	6b0827a08d959a148cbdd2f05886a8f028f401b1fef2edca626cb219bd45145d	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-server-10.5.18-24.el7_9.noarch.rpm	8fb4524a1e486615354ce319c4e76cfaf1e88e0623be8ac5100a1996f7fefabe	ELSA-2024-4222	ol7_x86_64_latest
	pki-server-10.5.18-24.el7_9.noarch.rpm	8fb4524a1e486615354ce319c4e76cfaf1e88e0623be8ac5100a1996f7fefabe	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-symkey-10.5.18-24.el7_9.x86_64.rpm	a09c68e70a1f2d089d9a471fa67d099215b1be3dc510b3f9d130538827bf99ea	ELSA-2024-4222	ol7_x86_64_latest
	pki-symkey-10.5.18-24.el7_9.x86_64.rpm	a09c68e70a1f2d089d9a471fa67d099215b1be3dc510b3f9d130538827bf99ea	ELSA-2024-4222	ol7_x86_64_u9_patch
	pki-tools-10.5.18-24.el7_9.x86_64.rpm	c5815238decd6775f1e5f535a46d559a193d2f76c08d2aea81ee659d6813890e	ELSA-2024-4222	ol7_x86_64_latest
	pki-tools-10.5.18-24.el7_9.x86_64.rpm	c5815238decd6775f1e5f535a46d559a193d2f76c08d2aea81ee659d6813890e	ELSA-2024-4222	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team