RHEA-2026:3934 - Product Enhancement Advisory

Topic

Updated RHCS 10.8 packages that fix several bugs and add various enhancements are now available.

Description

Red Hat Certificate System (RHCS) is a complete implementation of an
enterprise software system designed to manage enterprise Public Key
Infrastructure (PKI) deployments.

Many of the subcomponents that comprise RHCS, such the Tomcat servlet
container, the RESTEasy framework, and the Network Security Services (NSS)
libraries, are provided by the base operating system. RHCS only supports
the default versions of these subcomponents that ship with Red Hat
Enterprise Linux 8.10.

Users of Red Hat Certificate System are advised to upgrade to these updated
packages.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Certificate System 10.8 x86_64

Fixes

• DOGTAG-4123 - Add upgrade script to enable URL rewrite
• DOGTAG-4122 - EST Subsystem needs fix to improve client authentication process
• DOGTAG-3896 - pki-server subsystem-cert-update command fails with ERROR: 'NoneType' object has no attribute 'replace'
• DOGTAG-3995 - PKI group delete i.e <subsystem>-group-del is failing for name 'abc?' with error: ResourceNotFoundException: No such object: No such object
• DOGTAG-4266 - db-schema-upgrade using -h for ldapmodify resulting in ERROR: Unable to update schema
• DOGTAG-4280 - Missing registry entries for EST on upgraded server

CVEs

(none)

References

(none)