ALSA-2026:92408

Dashboard / Vulnerabilities / ALSA-2026:92408

ALSA-2026:92408

Summary: Important: dogtag-pki security update

Details: IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:92408, https://access.redhat.com/security/cve/CVE-2026-89058, https://access.redhat.com/security/cve/CVE-2026-89059, https://access.redhat.com/security/cve/CVE-2026-89407, https://bugzilla.redhat.com/2519756, https://bugzilla.redhat.com/2519775, https://bugzilla.redhat.com/2538720, https://errata.almalinux.org/10/ALSA-2026-92408.html