Red Hat Security AdvisoryRHSA-2026:86621
dogtag-pki security update
Released 2026-10-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) dogtag-pki-11.6.0-3.el10_0.1, idm-pki-acme-11.6.0-3.el10_0.1, idm-pki-base-11.6.0-3.el10_0.1 +6
Fixes 3 records
Priority HIGH 72
jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(v…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00628 · Published 2026-09-11 · Partial fix · 2.18.10, 2.21.6 +3 CWE-1333
Priority LOW 37
A flaw was found in pki-core.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00212 · Published 2026-09-21 · Partial fix · 11.9.0-5.el10_2, 11.6.0-3.el10_0.1 +2 CWE-863
Priority LOW 35
A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00778 · Published 2026-09-08 · Partial fix · 11.9.0-5.el10_2, 11.6.0-3.el10_0.1 +9 CWE-78
