p PatchFirst

RLSA-2026:75573

RLSA-2026:75573 · Important: pki-core:10.6 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fix(es): * pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.2 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • jss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb

  • ldapjdk Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb

  • resteasy Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.0.26-7.module+el8.10.0+2052+1b0fb438

    Update to 0:3.0.26-7.module+el8.10.0+2052+1b0fb438

  • resteasy Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb

    Update to 0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb

  • resteasy Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:3.0.26-7.module+el8.10.0+1767+f923f786

    Update to 0:3.0.26-7.module+el8.10.0+1767+f923f786

  • tomcatjss Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb

    Update to 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb

Original sources

Check your server →