Red Hat Product Errata RHBA-2026:76628 - Bug Fix Advisory
Issued:
2026-10-06
Updated:
2026-10-06

RHBA-2026:76628 - Bug Fix Advisory

Synopsis

cepces bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for cepces is now available for Red Hat Enterprise Linux 9.

Description

cepces is an application for enrolling certificates through CEP and CES. It requires certmonger to operate. Only simple deployments using Microsoft Active Directory Certificate Services have been tested.

Bug Fix(es) and Enhancement(s):

  • Regression in cepces rpm postinstall script [rhel-9.8.z] (JIRA:RHEL-215381)
  • avc: denied { search } for pid=12562 comm=cepces-submit name=net dev="proc" ino=1192 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 [rhel-9.8.z] (JIRA:RHEL-243527)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
x86_64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
x86_64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
s390x
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
s390x
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for Power, little endian 9

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
ppc64le
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
ppc64le
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for ARM 64 9

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
aarch64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
aarch64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
ppc64le
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
x86_64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
aarch64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
s390x
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
x86_64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
aarch64
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
ppc64le
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
cepces-0.3.17-4.el9_8.src.rpm SHA-256: 08dc7516916f92c5ffb91d953dac83d2062a95c3ac650c0bb5d911e6ffd495c8
s390x
cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 6ee102576123b824e982563422e3deeba9fb83d9563265e316c5a457da49c91e
cepces-certmonger-0.3.17-4.el9_8.noarch.rpm SHA-256: 26533e287caaeed4539af8457ee6d9131cf7a5e3188dec249d4d9e42a5819ec4
cepces-selinux-0.3.17-4.el9_8.noarch.rpm SHA-256: e74e2705cf54e54bd44fbdcf382535563776586717f466030f7695cb7c86ba37
python3-cepces-0.3.17-4.el9_8.noarch.rpm SHA-256: 47cb6e0b3ced55311357a85b2d32078eb2f3e75f1b0c1621043cdcb06d0129aa

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.