Oracle7: ELSA-2022-8799: pki-core security Important Security Updat...
Oracle Linux Security Advisory ELSA-2022-8799

https://linux.oracle.com/errata/ELSA-2022-8799.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
pki-base-10.5.18-24.el7_9.noarch.rpm
pki-base-java-10.5.18-24.el7_9.noarch.rpm
pki-ca-10.5.18-24.el7_9.noarch.rpm
pki-javadoc-10.5.18-24.el7_9.noarch.rpm
pki-kra-10.5.18-24.el7_9.noarch.rpm
pki-server-10.5.18-24.el7_9.noarch.rpm
pki-symkey-10.5.18-24.el7_9.x86_64.rpm
pki-tools-10.5.18-24.el7_9.x86_64.rpm


SRPMS:
https://oss.oracle.com/ol7/SRPMS-updates/pki-core-10.5.18-24.el7_9.src.rpm

Related CVEs:

CVE-2022-2414




Description of changes:

[10.5.18-24]
- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)


_______________________________________________
El-errata mailing list
[email protected]
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle7: ELSA-2022-8799: pki-core security Important Security Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[10.5.18-24] - ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - ########################################################################## - # RHCS 9.7 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen)

SRPMs

https://oss.oracle.com/ol7/SRPMS-updates/pki-core-10.5.18-24.el7_9.src.rpm

x86_64

pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm

aarch64

i386

Severity
Related CVEs: CVE-2022-2414

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.