Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-jss | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-jss-debuginfo | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-jss-javadoc | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-ldapjdk | 0:4.24.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-ldapjdk-javadoc | 0:4.24.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-acme | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-base | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-base-java | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-ca | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-kra | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-server | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-symkey | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-symkey-debuginfo | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-tools | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-pki-tools-debuginfo | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | idm-tomcatjss | 0:7.8.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | jss | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | jss-debugsource | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ldapjdk | 0:4.24.0-1.module+el8.10.0+21280+cce842b8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pki-core | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pki-core-debuginfo | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pki-core-debugsource | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-idm-pki | 0:10.15.1-3.module+el8.10.0+24994+a709cca8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | resteasy | 0:3.0.26-7.module+el8.10.0+21132+79720f4e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | resteasy-javadoc | 0:3.0.26-7.module+el8.10.0+21132+79720f4e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tomcatjss | 0:7.8.0-1.module+el8.10.0+21280+cce842b8 |
Vulnerabilities 1
-
High 7.2
Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)
A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges c…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2519523
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75573.json
-
report
https://access.redhat.com/security/cve/CVE-2026-76561
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-76561
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-76561