Описание
ELSA-2022-8799: pki-core security update (IMPORTANT)
[10.5.18-24]
- ##########################################################################
-
RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
-
RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen)
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
pki-base
10.5.18-24.el7_9
pki-base-java
10.5.18-24.el7_9
pki-ca
10.5.18-24.el7_9
pki-javadoc
10.5.18-24.el7_9
pki-kra
10.5.18-24.el7_9
pki-server
10.5.18-24.el7_9
pki-symkey
10.5.18-24.el7_9
pki-tools
10.5.18-24.el7_9
Oracle Linux x86_64
pki-base
10.5.18-24.el7_9
pki-base-java
10.5.18-24.el7_9
pki-ca
10.5.18-24.el7_9
pki-javadoc
10.5.18-24.el7_9
pki-kra
10.5.18-24.el7_9
pki-server
10.5.18-24.el7_9
pki-symkey
10.5.18-24.el7_9
pki-tools
10.5.18-24.el7_9
Связанные CVE
Связанные уязвимости
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Access to external entities when parsing XML documents can lead to XML ...
