RLSA-2026:92408

Dashboard / Vulnerabilities / RLSA-2026:92408

RLSA-2026:92408

Summary: Important: dogtag-pki security update

Details: IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder Security Fix(es): * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) (CVE-2026-89059) * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config (CVE-2026-89058) * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking (CVE-2026-89407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://errata.rockylinux.org/RLSA-2026:92408, https://bugzilla.redhat.com/show_bug.cgi?id=2519756, https://bugzilla.redhat.com/show_bug.cgi?id=2519775, https://bugzilla.redhat.com/show_bug.cgi?id=2538720, https://access.redhat.com/errata/RHSA-2026:92408