RHSA-2022:8915 - Security Advisory
Important: Red Hat Certificate System 9.7 security update
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
An update is now available for Red Hat Certificate System 9.7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.
- pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Update RHCS version of CA, KRA, OCSP, and TKS so that it can be identified using a browser [RHCS 9.7.z BU 19] (BZ#2136537)
For details on how to apply this update, which includes the changes described in this advisory, refer to:
- Red Hat Certificate System 9 x86_64
- BZ - 2104676 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE
Red Hat Certificate System 9
The Red Hat security contact is firstname.lastname@example.org. More contact details at https://access.redhat.com/security/team/contact/.