Release idm-pki-acme-11.9.0-6.el10_2 ALSA-2026:77648
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 15/100
Research direction
The payload names no file, test or entry point; it is an automated security-release notice for the idm-pki packages built against the jackson-databind dependency (CVE-2026-68497). Start by reading the linked CVE page and checking which jackson-databind version the el10_2 packages currently pull in. Done means the fixed build is published for every listed architecture, which needs maintainer access to the AlmaLinux build pipeline.
Written by the indexing model from the issue text.
Description
dogtag-pki security update
Severity: Important
Description
IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components:
- Certificate Authority (CA)
- Key Recovery Authority (KRA)
- Online Certificate Status Protocol (OCSP) Manager
- Token Key Service (TKS)
- Token Processing Service (TPS)
- Automatic Certificate Management Environment (ACME) Responder
- Enrollment over Secure Transport (EST) Responder
Security Fix(es):
- com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.x86_64
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.s390x
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.ppc64le
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.aarch64
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.x86_64_v2
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
python3-idm-pki-11.9.0-6.el10_2.noarch
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 5/5 Over a week Newbie friendliness 4/100
-
Difficulty 5/5 Over a week Newbie friendliness 5/100
All issues in AlmaLinux/updates
Similar issues
-
License misstatedOpen
Difficulty 1/5 Under an hour Newbie friendliness 70/100
flathub/net.cozic.joplin_desktop#345 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
LaneDibello/Kotor-Patch-Manager#328 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Homebrew/homebrew-cask#293134 ·
Maintainers usually reply within 1 day
-
good first issue need help packaging
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
phonology024/babelscribe#23 ·
-
package-update
Difficulty 1/5 1-3 hours Newbie friendliness 65/100
oSoWoSo/vOid_Community_repOsitory#319 · 1 comment ·
Maintainers usually reply within 1 day