Skip to content
OpenAdvisories
High RLSA-2022:7326 1 CVE

Important: pki-core security update

Published Nov 2, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 pki-core 0:11.0.6-2.el9_0

Vulnerabilities 1

  • Unscored —
    CVE-2022-2414 Public exploit Scanner template EPSS 85%

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows …

    dogtag-pki dogtag-pki Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104676