RLSA-2026:77648

See a problem?
Please try reporting it to the source first.

Source

https://errata.rockylinux.org/RLSA-2026:77648

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2026:77648.json

JSON Data

https://api.osv.dev/v1/vulns/RLSA-2026:77648

Upstream

CVE-2026-68497

Published

2026-10-09T12:10:46Z

Modified

2026-10-09T12:45:02Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Important: dogtag-pki security update

Details

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components:

Certificate Authority (CA)
Key Recovery Authority (KRA)
Online Certificate Status Protocol (OCSP) Manager
Token Key Service (TKS)
Token Processing Service (TPS)
Automatic Certificate Management Environment (ACME) Responder
Enrollment over Secure Transport (EST) Responder

Security Fix(es):

com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific

{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:77648"
}

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:10 / dogtag-pki

Package

Name: dogtag-pki
Purl: pkg:rpm/rocky-linux/dogtag-pki?distro=rocky-linux-10&epoch=0

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

0:11.9.0-6.el10_2.rocky.0.1

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:77648.json"