p PatchFirst

ALSA-2026:92408

ALSA-2026:92408 · Important: dogtag-pki security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • idm-pki-acme AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-base AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-ca AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-java AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-kra AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-server AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • idm-pki-tools AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

  • python3-idm-pki AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 11.9.0-6.el10_2.1.alma.1

    Update to 11.9.0-6.el10_2.1.alma.1

Original sources

Check your server →