Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Oracle Linux 7 ELSA-2022-8799 Critical: pki-core XML Parsing Issue

oracle
Calendar Grey December 6, 2022
Oracle Linux Logo Esm H88
Crucial vulnerability patch released for Oracle Linux 7 tackling CVE-2022-2414 concerning XML parsing vulnerabilities.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[10.5.18-24] - ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - ########################################################################## - # RHCS 9.7 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen)

Topics%20covered

Topics Covered

security advisory access control security fix important update pki-core xml parsing oracle linux

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates/pki-core-10.5.18-24.el7_9.src.rpm

x86_64

pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm

aarch64

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2022-2414

Topics%20covered

Topics Covered

security advisory access control security fix important update pki-core xml parsing oracle linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here