Skip to content
OpenAdvisories
High RLSA-2022:7470 1 CVE

Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update

Published Nov 8, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

Fixed packages 44

ReleasePackageFixed in
Rocky Linux · 8 apache-commons-collections 0:3.2.2-10.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-collections 0:3.2.2-10.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 apache-commons-lang 0:2.6-21.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-lang 0:2.6-21.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 apache-commons-net 0:3.6-3.module+el8.3.0+53+ea062990
Rocky Linux · 8 apache-commons-net 0:3.6-3.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 bea-stax 0:1.2.0-16.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-fastinfoset 0:1.2.13-9.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-jaxb 0:2.2.11-11.module+el8.3.0+53+ea062990
Rocky Linux · 8 glassfish-jaxb-api 0:2.2.12-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-annotations 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-core 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-databind 0:2.10.0-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-jaxrs-providers 0:2.9.9-1.module+el8.3.0+53+ea062990
Rocky Linux · 8 jackson-module-jaxb-annotations 0:2.7.6-4.module+el8.3.0+53+ea062990
Rocky Linux · 8 jakarta-commons-httpclient 1:3.1-28.module+el8.3.0+53+ea062990
Rocky Linux · 8 jakarta-commons-httpclient 1:3.1-28.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 javassist 0:3.18.1-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 javassist 0:3.18.1-8.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 jss 0:4.9.4-1.module+el8.7.0+1069+6f3de942
Rocky Linux · 8 ldapjdk 0:4.23.0-1.module+el8.7.0+1069+6f3de942
Rocky Linux · 8 ldapjdk 0:4.23.0-1.module+el8.5.0+701+8dc610e5
Rocky Linux · 8 pki-core 0:10.12.0-4.module+el8.7.0+1069+6f3de942
Rocky Linux · 8 python-nss 0:1.0.1-10.module+el8.3.0+53+ea062990
Rocky Linux · 8 relaxngDatatype 0:2011.1-7.module+el8.3.0+53+ea062990
Rocky Linux · 8 resteasy 0:3.0.26-6.module+el8.5.0+697+f586bb30
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.5.0+697+f586bb30
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 slf4j 0:1.7.25-4.module+el8.3.0+133+b8b54b58
Rocky Linux · 8 stax-ex 0:1.7.7-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 tomcatjss 0:7.7.1-1.module+el8.6.0+788+76246f77
Rocky Linux · 8 velocity 0:1.7-24.module+el8.3.0+53+ea062990
Rocky Linux · 8 velocity 0:1.7-24.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xalan-j2 0:2.7.1-38.module+el8.3.0+53+ea062990
Rocky Linux · 8 xalan-j2 0:2.7.1-38.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xerces-j2 0:2.11.0-34.module+el8.3.0+53+ea062990
Rocky Linux · 8 xerces-j2 0:2.11.0-34.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.5.0+697+f586bb30
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xml-commons-apis 0:1.4.01-25.module+el8.3.0+53+ea062990
Rocky Linux · 8 xml-commons-resolver 0:1.2-26.module+el8.3.0+53+ea062990
Rocky Linux · 8 xml-commons-resolver 0:1.2-26.module+el8.3.0+74+855e3f5d
Rocky Linux · 8 xmlstreambuffer 0:1.5.4-8.module+el8.3.0+53+ea062990
Rocky Linux · 8 xsom 0:0-19.20110809svn.module+el8.3.0+53+ea062990

Vulnerabilities 1

  • Unscored —
    CVE-2022-2414 Public exploit Scanner template EPSS 85%

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows …

    dogtag-pki dogtag-pki Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013674
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2057162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2104676