{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated RHCS 10.8 packages that fix several bugs are available.", "title": "Topic" }, { "category": "general", "text": "Red Hat Certificate System (RHCS) is a complete implementation of an\nenterprise software system designed to manage enterprise Public Key\nInfrastructure (PKI) deployments.\n\nMany of the subcomponents that comprise RHCS, such as the Tomcat servlet\ncontainer, the RESTEasy framework, and the Network Security Services (NSS)\nlibraries, are provided by the base operating system. RHCS only supports\nthe default versions of these subcomponents that ship with Red Hat\nEnterprise Linux 8.10.\n\nUsers of Red Hat Certificate System are advised to upgrade to these updated\npackages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:48095", "url": "https://access.redhat.com/errata/RHSA-2026:48095" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48095.json" } ], "title": "Red Hat Security Advisory: RHCS 10.8 bug fix and enhancement update", "tracking": { "current_release_date": "2026-09-13T00:09:21+00:00", "generator": { "date": "2026-09-13T00:09:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.21" } }, "id": "RHSA-2026:48095", "initial_release_date": "2026-07-29T18:04:07+00:00", "revision_history": [ { "date": "2026-07-29T18:04:07+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-07-29T18:04:07+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-09-13T00:09:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Certificate System 10.8 for RHEL 8", "product": { "name": "Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:certificate_system:10.8::el8" } } } ], "category": "product_family", "name": "Red Hat Certificate System" }, { "branches": [ { "category": "product_version", "name": "jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "product": { "name": "jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src (redhat-pki:10)", "product_id": "jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/jss@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=src&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "product": { "name": "ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src (redhat-pki:10)", "product_id": "ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/ldapjdk@5.6.0-3.module%2Bel8pki%2B24228%2B5326976e?arch=src&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "product": { "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src (redhat-pki:10)", "product_id": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=src&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/jss-debuginfo@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/jss-debugsource@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss-debuginfo@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss-javadoc@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss-tomcat@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss-tools@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product": { "name": "redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10)", "product_id": "redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-jss-tools-debuginfo@5.9.1-2.module%2Bel8pki%2B24483%2Bdb4528cf?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product": { "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10)", "product_id": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product": { "name": "redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10)", "product_id": "redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-debugsource@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product": { "name": "redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10)", "product_id": "redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-tools@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product": { "name": "redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10)", "product_id": "redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-tools-debuginfo@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=x86_64&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-redhat-pki@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "product": { "name": "redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch (redhat-pki:10)", "product_id": "redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-ldapjdk@5.6.0-3.module%2Bel8pki%2B24228%2B5326976e?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "product": { "name": "redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch (redhat-pki:10)", "product_id": "redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-ldapjdk-javadoc@5.6.0-3.module%2Bel8pki%2B24228%2B5326976e?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-acme@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-base@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-ca@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-console@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-console-theme@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-est@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-java@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-javadoc@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-kra@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-ocsp@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-server@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-theme@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-tks@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } }, { "category": "product_version", "name": "redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product": { "name": "redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10)", "product_id": "redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-pki-tps@11.9.2-4.module%2Bel8pki%2B24565%2B7517ad63?arch=noarch&rpmmod=redhat-pki:10:8100020260728001635:f9354743" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10" }, "product_reference": "jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10" }, "product_reference": "ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10" }, "product_reference": "redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10" }, "product_reference": "redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10" }, "product_reference": "redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10" }, "product_reference": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10" }, "product_reference": "redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10" }, "product_reference": "redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10" }, "product_reference": "redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10" }, "product_reference": "redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.8 for RHEL 8", "product_id": "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" }, "product_reference": "redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "relates_to_product_reference": "8Base-CertSys-10.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-54512", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2026-06-23T22:01:49.821346+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2492015" } ], "notes": [ { "category": "description", "text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-54512" }, { "category": "external", "summary": "RHBZ#2492015", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5", "url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/issues/5988", "url": "https://github.com/FasterXML/jackson-databind/issues/5988" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm", "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm" } ], "release_date": "2026-06-23T20:56:36.646000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-29T18:04:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:48095" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass" }, { "cve": "CVE-2026-54513", "cwe": { "id": "CWE-184", "name": "Incomplete List of Disallowed Inputs" }, "discovery_date": "2026-06-23T22:01:34.437620+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2492010" } ], "notes": [ { "category": "description", "text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution", "title": "Vulnerability summary" }, { "category": "other", "text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-54513" }, { "category": "external", "summary": "RHBZ#2492010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5", "url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e", "url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/issues/5981", "url": "https://github.com/FasterXML/jackson-databind/issues/5981" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/issues/5983", "url": "https://github.com/FasterXML/jackson-databind/issues/5983" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/pull/5984", "url": "https://github.com/FasterXML/jackson-databind/pull/5984" }, { "category": "external", "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f", "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f" } ], "release_date": "2026-06-23T20:53:52.543000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-29T18:04:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:48095" }, { "category": "workaround", "details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application’s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.", "product_ids": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-CertSys-10.8:jss-0:5.9.1-2.module+el8pki+24483+db4528cf.src::redhat-pki:10", "8Base-CertSys-10.8:jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:jss-debugsource-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.src::redhat-pki:10", "8Base-CertSys-10.8:python3-redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-javadoc-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tomcat-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-jss-tools-debuginfo-0:5.9.1-2.module+el8pki+24483+db4528cf.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-ldapjdk-javadoc-0:5.6.0-3.module+el8pki+24228+5326976e.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.src::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-acme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-base-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ca-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-console-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-debugsource-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-est-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-java-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-javadoc-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-kra-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-ocsp-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-server-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-theme-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tks-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tools-debuginfo-0:11.9.2-4.module+el8pki+24565+7517ad63.x86_64::redhat-pki:10", "8Base-CertSys-10.8:redhat-pki-tps-0:11.9.2-4.module+el8pki+24565+7517ad63.noarch::redhat-pki:10" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution" } ] }