RLSA-2026:92408

See a problem?
Please try reporting it to the source first.

Source

https://errata.rockylinux.org/RLSA-2026:92408

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2026:92408.json

JSON Data

https://api.osv.dev/v1/vulns/RLSA-2026:92408

Upstream

CVE (3)

Published

2026-10-30T12:08:48Z

Modified

2026-10-30T12:30:03Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Important: dogtag-pki security update

Details

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components:

Certificate Authority (CA)
Key Recovery Authority (KRA)
Online Certificate Status Protocol (OCSP) Manager
Token Key Service (TKS)
Token Processing Service (TPS)
Automatic Certificate Management Environment (ACME) Responder
Enrollment over Secure Transport (EST) Responder

Security Fix(es):

resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059)
resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058)
com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific

{
    "license":  "CC-BY-4.0",
    "license_url":  "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory":  "RHSA-2026:92408"
}

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:10 / dogtag-pki

Package

Name: dogtag-pki
Purl: pkg:rpm/rocky-linux/dogtag-pki?distro=rocky-linux-10&epoch=0

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

0:11.9.0-6.el10_2.1.rocky.0.1

Database specific

Show details

{
    "yum_repository":  "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:92408.json"