Summary
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.
Security Fix(es):
* pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | jss | 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb |
| Rocky Linux · 8 | ldapjdk | 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb |
| Rocky Linux · 8 | resteasy | 0:3.0.26-7.module+el8.10.0+2052+1b0fb438 |
| Rocky Linux · 8 | resteasy | 0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb |
| Rocky Linux · 8 | resteasy | 0:3.0.26-7.module+el8.10.0+1767+f923f786 |
| Rocky Linux · 8 | tomcatjss | 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb |
Vulnerabilities 1
-
High 7.2
Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)
A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges c…