RLSA-2026:75573

Security

Mirrored from RHSA-2026:75573

Issued at: 2026-10-05

Updated at: 2026-10-05

Advisory content derived from Red Hat RHSA-2026:75573, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: pki-core:10.6 security update

Description

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

* pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2519523

CVEs

CVE-2026-76561

Affected packages

Rocky Linux 8 aarch64 - AppStream

idm-jss-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.aarch64.rpm

idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.aarch64.rpm

idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.aarch64.rpm

idm-ldapjdk-0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb.noarch.rpm

idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb.noarch.rpm

idm-tomcatjss-0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb.noarch.rpm

jss-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.src.rpm

jss-debugsource-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.aarch64.rpm

ldapjdk-0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb.src.rpm

resteasy-0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb.noarch.rpm

resteasy-0:3.0.26-7.module+el8.10.0+2052+1b0fb438.noarch.rpm

resteasy-0:3.0.26-7.module+el8.10.0+1767+f923f786.noarch.rpm

resteasy-0:3.0.26-7.module+el8.10.0+1767+f923f786.src.rpm

resteasy-0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb.src.rpm

resteasy-0:3.0.26-7.module+el8.10.0+2052+1b0fb438.src.rpm

resteasy-javadoc-0:3.0.26-7.module+el8.10.0+1816+f1a7c8eb.noarch.rpm

tomcatjss-0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb.src.rpm

Rocky Linux 8 x86_64 - AppStream

idm-jss-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.x86_64.rpm

idm-jss-debuginfo-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.x86_64.rpm

idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb.x86_64.rpm