Skip to content
OpenAdvisories
High ELSA-2022-7326 1 CVE

Important: pki-core security update (Oracle Linux 9)

Published Nov 3, 2022 · Updated Nov 3, 2022

Ecosystem: Oracle Linux

Summary

[11.0.6-1.0.1]
- Replaced upstream graphical references [Orabug: 33952704]

[11.0.6-1]
- Bug #2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.0.0.z]

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 9 pki-acme 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-base 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-base-java 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-ca 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-kra 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-server 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-symkey 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 pki-tools 0:11.0.6-2.0.1.el9_0
Oracle Linux · 9 python3-pki 0:11.0.6-2.0.1.el9_0

Vulnerabilities 1

  • Unscored —
    CVE-2022-2414 Public exploit Scanner template EPSS 85%

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows …

    dogtag-pki dogtag-pki Debian Ubuntu