pki-core-11.0.6-2.el9.ML.1

エラータID: AXSA:2023-5106:02

Release date: 
Thursday, February 16, 2023 - 03:22
Subject: 
pki-core-11.0.6-2.el9.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Cybertrust Japan Co., Ltd. Certificate System.

Security Fix(es):

* pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-2414
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

Solution: 

Update packages.

CVEs: 
CVE-2022-2414
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Additional Info: 

N/A

Download: 

SRPMS
  1. pki-core-11.0.6-2.el9.ML.1.src.rpm
    MD5: 5715f8fee42f47badc7b742e0477e08b
    SHA-256: 3f51b125525a95d55987de3a8666792e5953a48e3dd442539ad774adc23dfb7e
    Size: 10.50 MB

Asianux Server 9 for x86_64
  1. pki-acme-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: f615cc4ea3ca4dfb396b48b08cf9ea91
    SHA-256: c0340e881cc6968109881ab4abc024b8e00754809b936f913e1c28a4ea4ff842
    Size: 975.52 kB
  2. pki-base-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: d163b91beac2d0cc3b444da1d4e012ff
    SHA-256: cc607d95638db6018c02b307acd45ba57bbeb0ef1c40c6a7b4d470f33f9c19df
    Size: 257.48 kB
  3. pki-base-java-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: 7a8adbc06cc0eda4535ac4a653c231f6
    SHA-256: ce864866927957cc0863dba43f6faf126a0fb662fc43cbb7f91c955c69dbcf12
    Size: 669.78 kB
  4. pki-ca-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: 67ff315ea50995e80c7671df9e5f8197
    SHA-256: f2e624a72e8ed959bd17e4393edef45349c5b4f38b695db71ad64c9d1b4d3bf4
    Size: 1.30 MB
  5. pki-kra-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: ce9c37a60b8e81b50ba72de75c4998ad
    SHA-256: a5a37b1543540e54d5ad38cab64f7ead6d0d0a5d7ed4e806123e0174c94e9100
    Size: 281.99 kB
  6. pki-server-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: eac5d7c15bfb9174f71dbe9efb34a5e9
    SHA-256: 95ebab7921fea4bdcc7d612a418d4462bd4743cbb30bb62ae00475f124069d2c
    Size: 2.55 MB
  7. pki-symkey-11.0.6-2.el9.ML.1.x86_64.rpm
    MD5: e31ff6eaf2c3c3a2ab333804cc4cd4b5
    SHA-256: ee03ed2960a49caaf229e5e3b8c8f14bcaec40e1a7f73dd293c2fddfbe9bf8a8
    Size: 51.96 kB
  8. pki-tools-11.0.6-2.el9.ML.1.x86_64.rpm
    MD5: e0a3cb991acd468de3031746d5909e71
    SHA-256: 56e14b9ffaba93cee70d01d7774dcca71794df4ea6632f1b09310e0c1b46108a
    Size: 822.18 kB
  9. python3-pki-11.0.6-2.el9.ML.1.noarch.rpm
    MD5: 1be38561f156079e07dd5f7d6a6e7b3e
    SHA-256: 758fc919b79c8fdfd9ca741ec9d7416bcfb741c0f445b9cf15658ad706e97a2a
    Size: 147.99 kB