ELSA-2026-75573

ELSA-2026-75573 - pki-core:10.6 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

jss
[4.11.0-1]
- Rebase to JSS 4.11.0

[4.10.0-0.1]
- Rebase to JSS 4.10.0-alpha1

[4.9.8-1]
- Rebase to JSS 4.9.8

[4.9.4-1]
- Rebase to JSS 4.9.4
- Bug 2013674 - JSS cannot be properly initialized after using another NSS-backed security provider

[4.9.3-1]
- Rebase to JSS 4.9.3
- Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]

[4.9.2-1]
- Rebase to JSS 4.9.2

[4.9.1-1]
- Rebase to JSS 4.9.1

[4.9.0-1]
- Rebase to JSS 4.9.0

[4.9.0-0.2]
- Rebase to JSS 4.9.0-alpha2

[4.9.0-0.1]
- Rebase to JSS 4.9.0-alpha1

ldapjdk
[4.24.0-1]
- Rebase to LDAP SDK 4.24.0

[4.24.0-0.1]
- Rebase to LDAP SDK 4.24.0-alpha1

[4.23.0-1]
- Rebase to LDAP SDK 4.23.0

[4.23.0-0.1]
- Rebase to LDAP SDK 4.23.0-alpha1

[4.22.0-1]
- Rebase to LDAP SDK 4.22.0

[4.21.0-2]
- Bump min required JSS version to 4.6.0

[4.21.0-1]
- Rebase to LDAP SDK 4.21.0

[4.20.0-0]
- Rebase to LDAP SDK 4.20.0

pki-core
[10.15.1-3.0.1]
- Remove upstream reference

[10.15.1-3]
- RHEL-245455 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list
(10.15.1 adaptation by Alessandro Garagna )

[10.15.1-2]
- Bug RHEL-141365 - Install replica fails when LDAP/DIRSRV Server certs are signed by an External CA

[10.15.1-1]
- Rebase to PKI 10.15.1
- Fix CVE 2023-4727

[10.15.0-1]
- Rebase to PKI 10.15.0

[10.15.0-0.1]
- Rebase to PKI 10.15.0-alpha1

[10.14.3-2]
- Replace pki-servlet-engine with tomcat

[10.14.3-1]
- Rebase to PKI 10.14.3
- Bug 1959057 - An error has ocorred (IPA Error 4301:CertificateOperationError)
- Bug 2016164 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
- Bug 2022561 - ipa-healthcheck CADogtagCertsConfigCheck fail to process the scenario of renewed IPA CA certificates ( ipa get_cert_from_db() )

[10.14.2-1]
- Rebase to PKI 10.14.2
- Bug 2149253 - Rebase to upstream version v2.14.2

[10.12.0-4]
- Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE
- Rename packages to idm-pki

resteasy
[3.0.26-7]
- RHEL-16724: Replace pki-servlet-4.0-api with tomcat-servlet-4.0-api

[3.0.26-6]
- CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
Resolves: rh-bz#1845548

[3.5.1-3]
- Avoid redundant jcip-annotations dependency

[3.5.1-2]
- Use servlet-api from pki-servlet-container package

[3.5.1-1]
- Switch to JBoss sources and build Jackson 2 provider instead of Jackson 1

[3.0.19-8]
- Minimize to contain just components needed by pki-core

[3.0.19-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.19-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.19-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.19-4]
- build fix for netty 3.10.6.Final

tomcatjss
[7.8.0-1]
- Rebase to TomcatJSS 7.8.0

[7.8.0-0.1]
- Rebase to TomcatJSS 7.8.0-alpha1

[7.7.3-1]
- Replace pki-servlet-engine with tomcat

[7.7.1-1]
- Rebase to TomcatJSS 7.7.1

[7.7.0-1]
- Rebase to TomcatJSS 7.7.0

[7.7.0-0.1]
- Rebase to TomcatJSS 7.7.0-alpha1

[7.6.1-1]
- Rebase to TomcatJSS 7.6.1

[7.6.0-2]
- Bump dependency to JSS 4.8.0
- Remove unsupported platforms

[7.6.0-1]
- Rebase to TomcatJSS 7.6.0

[7.5.0-1]
- Rebase to TomcatJSS 7.5.0

Related CVEs

CVE-2026-76561

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	jss-4.11.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	0e06e2380dda86d60623708fcf4459ec2c6ef78a8d4456d7a53842fc0f4ef8f8	-	ol8_aarch64_appstream
	ldapjdk-4.24.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	cc32d63142501bc67dbfbdeae32168ffc62a989c0b1dd5ef69a800f87379e337	-	ol8_aarch64_appstream
	pki-core-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.src.rpm	a1c6838a6dccec03b3d863e25beb4548b6e374cba6b0ecfd257205300920520f	-	ol8_aarch64_appstream
	resteasy-3.0.26-7.module+el8.10.0+90362+5113f0b5.src.rpm	4afb5a5a76b6b94c86224d346b410007ec26c38ebb53358098b90f57359073f9	-	ol8_aarch64_appstream
	tomcatjss-7.8.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	c81702f8ab9e8b8c8a141a55dcf02b0b665ac6132db4e61c0e536f99d9ba0458	-	ol8_aarch64_appstream
	idm-jss-4.11.0-1.module+el8.10.0+90362+5113f0b5.aarch64.rpm	0617f896d4dd8b0139b024d6bdd22a37db2b61d1c92c3d51e27f7824fdc9545e	-	ol8_aarch64_appstream
	idm-jss-javadoc-4.11.0-1.module+el8.10.0+90362+5113f0b5.aarch64.rpm	9a0a2bebb26bc27e5716cc61b919fbf8f9d0ac29c69ca95c2c5a51cb6dc97128	-	ol8_aarch64_appstream
	idm-ldapjdk-4.24.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	f04dc8e0c5760058ae9d121da21316a9b6979176c8e1676af8f537f42acc5bd9	-	ol8_aarch64_appstream
	idm-ldapjdk-javadoc-4.24.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	d9717d4c3994a73e6e1c0134594b83ea6810db0994a37e4764ea188a23f8ef76	-	ol8_aarch64_appstream
	idm-pki-acme-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	bd8bab76afd4fb8a73c6508a716871dc1cea509189b8bbdfadf17d1273bf0dc8	-	ol8_aarch64_appstream
	idm-pki-base-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	b39b42764d17a82df945383175a20e26d7084ab434dac831d97415c13df59fc4	-	ol8_aarch64_appstream
	idm-pki-base-java-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	0c6e208fe69b48827e6806300aca3321b5b5b7c96025f4300b23f31588788f06	-	ol8_aarch64_appstream
	idm-pki-ca-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	3e22a9517f96d6c4fef444e39daf3e3209949489a6308850bfd596d2b125aa4c	-	ol8_aarch64_appstream
	idm-pki-kra-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	c83a8fa9ddb52090c0275134191936618309171ab783ec7567a24b0b1a12289c	-	ol8_aarch64_appstream
	idm-pki-server-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	2b477bf5831967e6a3bb02ed315e0b45f16133fcbf7a0ebe52113922fa39bdc7	-	ol8_aarch64_appstream
	idm-pki-symkey-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.aarch64.rpm	763fb282eb60570f48e263517113c1114f3ca38b9c1f7fba14ae9b03578a9fef	-	ol8_aarch64_appstream
	idm-pki-tools-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.aarch64.rpm	aa9ddd561db05b45ef69ed8104fcd396af453d4390f480646e551972324e93a8	-	ol8_aarch64_appstream
	idm-tomcatjss-7.8.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	01418eca84420944db21d98df611905c7377838567dfaf304ace3ad425ce0e0d	-	ol8_aarch64_appstream
	python3-idm-pki-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	a0de440ddf45a70d028cc74d81e496a77a5d5125d514b6afacdabc8f32831ee2	-	ol8_aarch64_appstream
	resteasy-3.0.26-7.module+el8.10.0+90362+5113f0b5.noarch.rpm	e30fe6bc05740dc7dbdca86c44f93b5e9cf69dff9dca94151dd528114cb90213	-	ol8_aarch64_appstream
	resteasy-javadoc-3.0.26-7.module+el8.10.0+90362+5113f0b5.noarch.rpm	422db830003e4e65b881a3c79ea2a44cf790cfb85508148268fe2e331fd62e02	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	jss-4.11.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	0e06e2380dda86d60623708fcf4459ec2c6ef78a8d4456d7a53842fc0f4ef8f8	-	ol8_x86_64_appstream
	ldapjdk-4.24.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	cc32d63142501bc67dbfbdeae32168ffc62a989c0b1dd5ef69a800f87379e337	-	ol8_x86_64_appstream
	pki-core-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.src.rpm	a1c6838a6dccec03b3d863e25beb4548b6e374cba6b0ecfd257205300920520f	-	ol8_x86_64_appstream
	resteasy-3.0.26-7.module+el8.10.0+90362+5113f0b5.src.rpm	4afb5a5a76b6b94c86224d346b410007ec26c38ebb53358098b90f57359073f9	-	ol8_x86_64_appstream
	tomcatjss-7.8.0-1.module+el8.10.0+90362+5113f0b5.src.rpm	c81702f8ab9e8b8c8a141a55dcf02b0b665ac6132db4e61c0e536f99d9ba0458	-	ol8_x86_64_appstream
	idm-jss-4.11.0-1.module+el8.10.0+90362+5113f0b5.x86_64.rpm	28db6581d5d69a3f46629e520a893b2bbf0957987856d7dee8da0d88850f81e9	-	ol8_x86_64_appstream
	idm-jss-javadoc-4.11.0-1.module+el8.10.0+90362+5113f0b5.x86_64.rpm	af65acf3a1b5e20c992baf18ede045823645bde0670c25d3629b8dfcb2f07a6f	-	ol8_x86_64_appstream
	idm-ldapjdk-4.24.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	f04dc8e0c5760058ae9d121da21316a9b6979176c8e1676af8f537f42acc5bd9	-	ol8_x86_64_appstream
	idm-ldapjdk-javadoc-4.24.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	d9717d4c3994a73e6e1c0134594b83ea6810db0994a37e4764ea188a23f8ef76	-	ol8_x86_64_appstream
	idm-pki-acme-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	bd8bab76afd4fb8a73c6508a716871dc1cea509189b8bbdfadf17d1273bf0dc8	-	ol8_x86_64_appstream
	idm-pki-base-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	b39b42764d17a82df945383175a20e26d7084ab434dac831d97415c13df59fc4	-	ol8_x86_64_appstream
	idm-pki-base-java-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	0c6e208fe69b48827e6806300aca3321b5b5b7c96025f4300b23f31588788f06	-	ol8_x86_64_appstream
	idm-pki-ca-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	3e22a9517f96d6c4fef444e39daf3e3209949489a6308850bfd596d2b125aa4c	-	ol8_x86_64_appstream
	idm-pki-kra-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	c83a8fa9ddb52090c0275134191936618309171ab783ec7567a24b0b1a12289c	-	ol8_x86_64_appstream
	idm-pki-server-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	2b477bf5831967e6a3bb02ed315e0b45f16133fcbf7a0ebe52113922fa39bdc7	-	ol8_x86_64_appstream
	idm-pki-symkey-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.x86_64.rpm	547f8aa00e4d69c3079c08b8cfb02fa09b286cea661c1203446c4a8833d33006	-	ol8_x86_64_appstream
	idm-pki-tools-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.x86_64.rpm	7276a298478cae08766cde7b89b8112964cb7792c9b27d01148dfe32e60c3fd0	-	ol8_x86_64_appstream
	idm-tomcatjss-7.8.0-1.module+el8.10.0+90362+5113f0b5.noarch.rpm	01418eca84420944db21d98df611905c7377838567dfaf304ace3ad425ce0e0d	-	ol8_x86_64_appstream
	python3-idm-pki-10.15.1-3.0.1.module+el8.10.0+91058+3f9a8c26.noarch.rpm	a0de440ddf45a70d028cc74d81e496a77a5d5125d514b6afacdabc8f32831ee2	-	ol8_x86_64_appstream
	resteasy-3.0.26-7.module+el8.10.0+90362+5113f0b5.noarch.rpm	e30fe6bc05740dc7dbdca86c44f93b5e9cf69dff9dca94151dd528114cb90213	-	ol8_x86_64_appstream
	resteasy-javadoc-3.0.26-7.module+el8.10.0+90362+5113f0b5.noarch.rpm	422db830003e4e65b881a3c79ea2a44cf790cfb85508148268fe2e331fd62e02	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team