p PatchFirst

ALSA-2026:43400

ALSA-2026:43400 · Important: dogtag-pki security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder Security Fix(es): * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513) * jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • idm-pki-acme AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-base AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-ca AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-java AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-kra AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-server AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • idm-pki-tools AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

  • python3-idm-pki AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-4.el10_2.alma.1

    Update to 11.9.0-4.el10_2.alma.1

Original sources

Check your server →