Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

Release idm-pki-acme-11.9.0-6.el10_2 ALSA-2026:77648

Chiusa
  • Qualcosa non va?
#3,779 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
4/5
Tempo stimato
1-2 giorni
Idoneità per principianti
15/100
Tipo di issue
Bug
Chiarezza
Da chiarire
Stato di attività
Attiva
Stack tecnologico
java, linux
Ambito
release, security

Direzione di ricerca

The payload names no file, test or entry point; it is an automated security-release notice for the idm-pki packages built against the jackson-databind dependency (CVE-2026-68497). Start by reading the linked CVE page and checking which jackson-databind version the el10_2 packages currently pull in. Done means the fixed build is published for every listed architecture, which needs maintainer access to the AlmaLinux build pipeline.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

dogtag-pki security update
Severity: Important
Description
IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components:

  • Certificate Authority (CA)
  • Key Recovery Authority (KRA)
  • Online Certificate Status Protocol (OCSP) Manager
  • Token Key Service (TKS)
  • Token Processing Service (TPS)
  • Automatic Certificate Management Environment (ACME) Responder
  • Enrollment over Secure Transport (EST) Responder

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.x86_64
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.s390x
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.ppc64le
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.aarch64
python3-idm-pki-11.9.0-6.el10_2.noarch
idm-pki-tools-11.9.0-6.el10_2.x86_64_v2
idm-pki-acme-11.9.0-6.el10_2.noarch
idm-pki-base-11.9.0-6.el10_2.noarch
idm-pki-ca-11.9.0-6.el10_2.noarch
idm-pki-java-11.9.0-6.el10_2.noarch
idm-pki-kra-11.9.0-6.el10_2.noarch
idm-pki-server-11.9.0-6.el10_2.noarch
python3-idm-pki-11.9.0-6.el10_2.noarch

Lingua principale
Nessun dato sulla lingua
Stelle
2
Fork
0
Nessuna PR unita negli ultimi 30g

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di AlmaLinux/updates

Tutte le issue di AlmaLinux/updates

Issue simili

Altre issue su Release

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.