RHSA-2023:1966: Important: pki-core:10.6 security update
Published Apr 25, 2023
·Updated
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.Security Fix(es): pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
53 affected componentsFixes available
redhat/jss<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/ldapjdk<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/pki-core<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/tomcatjss<7.6.1-1.module+el8.4.0+8778+d07929ff
7.6.1-1.module+el8.4.0+8778+d07929ff
redhat/jss<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-debuginfo<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-debugsource<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-javadoc<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/ldapjdk<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/ldapjdk-javadoc<4.22.0-1.module+el8.3.0+6784+6e1e4c62
4.22.0-1.module+el8.3.0+6784+6e1e4c62
redhat/pki-acme<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-base<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-base-java<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-ca<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-core-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-core-debugsource<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-kra<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-server<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/python3-pki<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/tomcatjss<7.6.1-1.module+el8.4.0+8778+d07929ff
7.6.1-1.module+el8.4.0+8778+d07929ff
redhat/jss-debuginfo<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-debugsource<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-javadoc<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/pki-core-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-core-debugsource<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/jss<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-debuginfo<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-debugsource<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/jss-javadoc<4.8.1-2.module+el8.4.0+10451+3e5b5448
4.8.1-2.module+el8.4.0+10451+3e5b5448
redhat/pki-core-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-core-debugsource<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-symkey-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/pki-tools-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3
10.10.5-6.module+el8.4.0+17580+3370c7a3
redhat/jss<4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
redhat/jss-debuginfo<4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
redhat/jss-debugsource<4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
redhat/jss-javadoc<4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
4.8.1-2.module+el8.4.0+10451+3e5b5448.aa
redhat/pki-core-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
redhat/pki-core-debugsource<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
redhat/pki-symkey<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
redhat/pki-symkey-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
redhat/pki-tools<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
redhat/pki-tools-debuginfo<10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
10.10.5-6.module+el8.4.0+17580+3370c7a3.aa
Remediation
Event History
Apr 30, 2026
Advisory Published
via Red Hat·08:29 PM
Data Sourced
via Red Hat·08:29 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2023:1966?
RHSA-2023:1966 is classified as important due to the risk of XML External Entity (XXE) attacks.
2
How do I fix RHSA-2023:1966?
To fix RHSA-2023:1966, update the affected packages to the recommended fixed versions provided in the advisory.
3
What packages are affected by RHSA-2023:1966?
The affected packages in RHSA-2023:1966 include pki-core, ldapjdk, jss, and tomcatjss among others.
4
What vulnerabilities are addressed in RHSA-2023:1966?
RHSA-2023:1966 addresses the vulnerability of unauthorized access to external entities when parsing XML, known as CVE-2022-2414.
5
When was RHSA-2023:1966 released?
RHSA-2023:1966 was released to address security vulnerabilities that impact Red Hat Certificate System.