RHSA-2023:3394: Important: pki-core:10.6 security update
First published: Wed May 31 2023(Updated: )
Important: pki-core:10.6 security update
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support | ||
| Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | ||
| Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support | ||
| redhat/jss | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/ldapjdk | <4.23.0-1.module+el8.5.0+11983+6ba118b4 | 4.23.0-1.module+el8.5.0+11983+6ba118b4 |
| redhat/pki-core | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/tomcatjss | <7.7.1-1.module+el8.6.0+13291+248751b1 | 7.7.1-1.module+el8.6.0+13291+248751b1 |
| redhat/ldapjdk | <4.23.0-1.module+el8.5.0+11983+6ba118b4 | 4.23.0-1.module+el8.5.0+11983+6ba118b4 |
| redhat/ldapjdk-javadoc | <4.23.0-1.module+el8.5.0+11983+6ba118b4 | 4.23.0-1.module+el8.5.0+11983+6ba118b4 |
| redhat/pki-acme | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-base | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-base-java | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-ca | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-kra | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-server | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/python3-pki | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/tomcatjss | <7.7.1-1.module+el8.6.0+13291+248751b1 | 7.7.1-1.module+el8.6.0+13291+248751b1 |
| redhat/jss | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-debuginfo | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-debugsource | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-javadoc | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/pki-core-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-core-debugsource | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/jss-debuginfo | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-debugsource | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-javadoc | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/pki-core-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-core-debugsource | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/jss | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-debuginfo | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-debugsource | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/jss-javadoc | <4.9.3-1.module+el8.6.0+14244+60d461b7 | 4.9.3-1.module+el8.6.0+14244+60d461b7 |
| redhat/pki-core-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-core-debugsource | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-symkey-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/pki-tools-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17 | 10.12.7-1.module+el8.6.0+18623+dea80f17 |
| redhat/jss | <4.9.3-1.module+el8.6.0+14244+60d461b7.aa | 4.9.3-1.module+el8.6.0+14244+60d461b7.aa |
| redhat/jss-debuginfo | <4.9.3-1.module+el8.6.0+14244+60d461b7.aa | 4.9.3-1.module+el8.6.0+14244+60d461b7.aa |
| redhat/jss-debugsource | <4.9.3-1.module+el8.6.0+14244+60d461b7.aa | 4.9.3-1.module+el8.6.0+14244+60d461b7.aa |
| redhat/jss-javadoc | <4.9.3-1.module+el8.6.0+14244+60d461b7.aa | 4.9.3-1.module+el8.6.0+14244+60d461b7.aa |
| redhat/pki-core-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
| redhat/pki-core-debugsource | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
| redhat/pki-symkey | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
| redhat/pki-symkey-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
| redhat/pki-tools | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
| redhat/pki-tools-debuginfo | <10.12.7-1.module+el8.6.0+18623+dea80f17.aa | 10.12.7-1.module+el8.6.0+18623+dea80f17.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2023:3394?
The RHSA-2023:3394 vulnerability has been classified as important.
How do I fix RHSA-2023:3394?
To fix RHSA-2023:3394, update to the remedied packages, specifically pki-core version 10.12.7-1.module+el8.6.0+18623+dea80f17.
What vulnerabilities are addressed in RHSA-2023:3394?
RHSA-2023:3394 addresses a vulnerability allowing access to external entities when parsing XML, leading to an XXE attack (CVE-2022-2414).
Which systems are affected by RHSA-2023:3394?
RHSA-2023:3394 affects multiple Red Hat Enterprise Linux products, including versions for Power, ARM 64, and Extended Update Support.
What is CVE-2022-2414 related to RHSA-2023:3394?
CVE-2022-2414 is a vulnerability related to XML external entity (XXE) processing that can be exploited in the Public Key Infrastructure (PKI) Core.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata-latest
- anchor-id/RHSA-2023:3394
- collector/redhat-errata
- source/Red Hat
- agent/software-canonical-lookup
- vendor/red hat
- canonical/red hat red hat enterprise linux for power, little endian - extended update support
- canonical/red hat red hat enterprise linux server for power le - update services for sap solutions
- canonical/red hat red hat enterprise linux for arm 64 - extended update support
- package-manager/redhat