Skip to content
OpenAdvisories
Unscored RHSA-2022:7470 1 CVE

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security and bug fix update

Published Sep 16, 2024 · Updated Nov 22, 2025

Fixed packages 15

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-acme 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-base 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-base-java 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-ca 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-kra 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-server 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-symkey 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-symkey-debuginfo 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-tools 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream idm-pki-tools-debuginfo 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream ldapjdk-javadoc 0:4.23.0-1.module+el8.5.0+11983+6ba118b4
Red Hat · RHEL 8 enterprise_linux:8::appstream pki-core 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream pki-core-debuginfo 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream pki-core-debugsource 0:10.12.0-4.module+el8.7.0+16126+c5918a27
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-idm-pki 0:10.12.0-4.module+el8.7.0+16126+c5918a27

Vulnerabilities 1

  • Unscored —
    CVE-2022-2414 Public exploit Scanner template EPSS 85%

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows …

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013674
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2057162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104676
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7470.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-2414
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2414
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2414