(RHSA-2022:7470) Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update

2022-11-0806:20:23

access.redhat.com

pki-core

pki-deps

security fix

xxe vulnerability

red hat certificate system

cve-2022-2414

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.036

Percentile

91.7%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xjss-debugsource< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-debugsource-4.9.4-1.module+el8.7.0+15532+95bac9ee.s390x.rpm
RedHatanyx86_64jss-debuginfo< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-debuginfo-4.9.4-1.module+el8.7.0+15532+95bac9ee.x86_64.rpm
RedHatanys390xidm-pki-tools-debuginfo< 10.12.0-4.module+el8.7.0+16126+c5918a27idm-pki-tools-debuginfo-10.12.0-4.module+el8.7.0+16126+c5918a27.s390x.rpm
RedHatanyx86_64jss< 4.9.4-1.module+el8.7.0+15532+95bac9eejss-4.9.4-1.module+el8.7.0+15532+95bac9ee.x86_64.rpm
RedHatanynoarchslf4j< 1.7.25-4.module+el8.1.0+3366+6dfb954cslf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchjackson-annotations< 2.10.0-1.module+el8.2.0+5059+3eb3af25jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
RedHatanynoarchidm-pki-ca< 10.12.0-4.module+el8.7.0+16126+c5918a27idm-pki-ca-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm
RedHatanynoarchjavassist< 3.18.1-8.module+el8.1.0+3366+6dfb954cjavassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchglassfish-jaxb-runtime< 2.2.11-11.module+el8.1.0+3366+6dfb954cglassfish-jaxb-runtime-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHatanynoarchidm-pki-acme< 10.12.0-4.module+el8.7.0+16126+c5918a27idm-pki-acme-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	jss-debugsource	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-debugsource-4.9.4-1.module+el8.7.0+15532+95bac9ee.s390x.rpm
RedHat	any	x86_64	jss-debuginfo	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-debuginfo-4.9.4-1.module+el8.7.0+15532+95bac9ee.x86_64.rpm
RedHat	any	s390x	idm-pki-tools-debuginfo	< 10.12.0-4.module+el8.7.0+16126+c5918a27	idm-pki-tools-debuginfo-10.12.0-4.module+el8.7.0+16126+c5918a27.s390x.rpm
RedHat	any	x86_64	jss	< 4.9.4-1.module+el8.7.0+15532+95bac9ee	jss-4.9.4-1.module+el8.7.0+15532+95bac9ee.x86_64.rpm
RedHat	any	noarch	slf4j	< 1.7.25-4.module+el8.1.0+3366+6dfb954c	slf4j-1.7.25-4.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	jackson-annotations	< 2.10.0-1.module+el8.2.0+5059+3eb3af25	jackson-annotations-2.10.0-1.module+el8.2.0+5059+3eb3af25.noarch.rpm
RedHat	any	noarch	idm-pki-ca	< 10.12.0-4.module+el8.7.0+16126+c5918a27	idm-pki-ca-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm
RedHat	any	noarch	javassist	< 3.18.1-8.module+el8.1.0+3366+6dfb954c	javassist-3.18.1-8.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	glassfish-jaxb-runtime	< 2.2.11-11.module+el8.1.0+3366+6dfb954c	glassfish-jaxb-runtime-2.2.11-11.module+el8.1.0+3366+6dfb954c.noarch.rpm
RedHat	any	noarch	idm-pki-acme	< 10.12.0-4.module+el8.7.0+16126+c5918a27	idm-pki-acme-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch.rpm