Oracle Linux 7 ELSA-2022-7086 Moderate: pki-core XML Vulnerabilities
oracle
October 25, 2022
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Summary
[10.5.18-23] - ########################################################################## - # RHEL 7.9 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley) - ########################################################################## - # RHCS 9.7 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen) - Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert pro...
Read the Full Advisory
Topics Covered
SRPMs
https://oss.oracle.com:443/ol7/SRPMS-updates/pki-core-10.5.18-23.el7_9.src.rpm
x86_64
aarch64
pki-base-10.5.18-23.el7_9.noarch.rpm pki-base-java-10.5.18-23.el7_9.noarch.rpm pki-ca-10.5.18-23.el7_9.noarch.rpm pki-kra-10.5.18-23.el7_9.noarch.rpm pki-server-10.5.18-23.el7_9.noarch.rpm pki-symkey-10.5.18-23.el7_9.aarch64.rpm pki-tools-10.5.18-23.el7_9.aarch64.rpm pki-javadoc-10.5.18-23.el7_9.noarch.rpm
PREVIOUS
NEXT
Related CVEs:
CVE-2022-2393
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!