Red Hat Product Errata RHSA-2026:67110 - Security Advisory
Issued:
2026-09-14
Updated:
2026-09-14

RHSA-2026:67110 - Security Advisory

Synopsis

Moderate: Red Hat Certificate System 10.4.4 security and bug fix update for RHEL 8

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for Red Hat Certificate System 10.4 for RHEL 8.6 is now available.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.

Description

Red Hat Certificate System (RHCS) is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments.

Security fixes:

  • CVE-2026-18369 - ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects

Users of RHCS are advised to upgrade to these updated packages.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Certificate System - Extended Update Support 10 for RHEL 8.6 x86_64

Fixes

  • DOGTAG-4629 - RHCS Level-1 HSM KRA compatibility verification tool (non-pqc) - 10.13.14 CC

Red Hat Certificate System - Extended Update Support 10 for RHEL 8.6

SRPM
idm-console-framework-1.3.0-1.module+el8pki+14677+1ef79a68.src.rpm SHA-256: f1e07ec9162bb2ec41f9b101b36de2624bf7bc3030c1feed232045bb0ac328f0
jss-4.9.11-1.module+el8pki+24697+be195eea.src.rpm SHA-256: 798297879daf01beb14c1aa57b1df89a6ccc2d3014cab5ca8fd51632ba73a161
ldapjdk-4.23.0-1.module+el8pki+14677+1ef79a68.src.rpm SHA-256: 6bd38fed1a2db9ba63376ba3ccb711a957b139f65a50af391a7982aba0a84d89
redhat-pki-10.13.14-1.module+el8pki+24697+be195eea.src.rpm SHA-256: 38bb3843d9d438381ec2240da9b7c1940b6c88e99b9f2f0031866f273d5ef314
tomcatjss-7.7.4-1.module+el8pki+21738+33a5e23b.src.rpm SHA-256: 2a5c1003aa868c47a0ed4aa19900e850117cadc37eb2901fc9ca12da470ea291
x86_64
idm-console-framework-1.3.0-1.module+el8pki+14677+1ef79a68.noarch.rpm SHA-256: ac037df948cc1630fc8a3ffa04d0cfa84f45dfc80ba409279ae9b68a91c1399b
jss-4.9.11-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: d96307111d82d3ccaf72836b6799d1dd535e21d844fc05b459a6a046c638d0a3
jss-debuginfo-4.9.11-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: 1e983738234119e3e9fd78b8cca39778b966018b46a9937eb916c69e98f4405e
jss-debugsource-4.9.11-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: fa04b9d684e43d58386867f6e91495b2cde99f400ffee6078098d4c805fe0b25
jss-javadoc-4.9.11-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: 8b03ba8243eddb3dd179a00d43f245a7eeee64b9b54b0c66be5578e204d74927
ldapjdk-4.23.0-1.module+el8pki+14677+1ef79a68.noarch.rpm SHA-256: d086f8c6e48d0ca7bd894c748bcba6ba1b32c919c4d5f0d796f7394a3c78600f
ldapjdk-javadoc-4.23.0-1.module+el8pki+14677+1ef79a68.noarch.rpm SHA-256: b68dec3dce1e0b98b2211b12be2a46eff13dd957667374fe0b8d1bd6781159cc
python3-redhat-pki-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 410a54825470cfcf92502078ed07c0b2d7803a6c94eb14ef28da240b379a52fd
redhat-pki-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: ecd596326c703e3f7afddeb67cd3578919df1ae4adc31e6aa51204bafe2f9d10
redhat-pki-acme-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 5d9407252ac5566be5ec53e4388c56951b239c44a33b637851a69e2ebb512b7c
redhat-pki-base-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: bb238db8a04077664f467ea7122a22a475c2848e14fb2b7c54d16b9a58dd3eaf
redhat-pki-base-java-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 117cbf197a18df1ae6c7346fba3bdd988a0bf502a9f166071461210dc44732d1
redhat-pki-ca-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: aab2d509523dea733ee2802c987d7eb3af6834c6a8307acbe5b1ee99caf14d21
redhat-pki-console-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 4ef5d88633acc7579795a954af225ccf2d8aa003aecab286e61602e6403139a6
redhat-pki-console-theme-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 2e55cfe0198ed4e0e5edcd55467e590de92ea2dcd5a8579a1247bd662d45ed6d
redhat-pki-debuginfo-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: e4476555f41105e36aed28069318533e1e1f3e7f4e4f7edcfc5a2520a5c66d22
redhat-pki-debugsource-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: bb49c2b1df109095770bb4f6a6f0ac3eede3be9fd1ffcfa5e9526ef0dbe36053
redhat-pki-est-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: bbff72d9ab28e7261c7e135af6f0ec5122523ad914e2d4a1e5e359fa0e2eabe8
redhat-pki-javadoc-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 15e620db92a7827e4b8e5511c4c2a3eb23b63fce37dfd1ad4b88395937b9f93f
redhat-pki-kra-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: c4905aca7be69a3c3bcf2de83c67ab2aa8ac3b148d7071022aee86139cf6c50f
redhat-pki-ocsp-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: dca122fd4f706a8d989d11953d27b22ee6bb9ca6c0935be77b9d9e50a1f5501d
redhat-pki-server-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 61cc02a768dc59f2362bd8c51dac9110a3fac78966ce05d2d713423a56d8119f
redhat-pki-server-theme-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 5ce42d23bd862c848527cbfdde86cf452f4e8e5d0d4feeb309793eeab4d73953
redhat-pki-symkey-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: a1647274499e51e99836a4a16ba6b9465900888314e680198b8393e072a518ce
redhat-pki-symkey-debuginfo-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: 7b5c6dc587000a2b857553020b1c458611621487c0e6f36125d1447480cbf5d5
redhat-pki-tks-10.13.14-1.module+el8pki+24697+be195eea.noarch.rpm SHA-256: 04f8e485a77fefa74fd74ade7d77d0a7b927687580e2385e8dddeb8c3b36ea6e
redhat-pki-tools-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: e248f65c9e437f124bd4e6c2d321ddacb9890cc3f39ce6af7e69c8e1d225c799
redhat-pki-tools-debuginfo-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: 7a5bec397c6ccf7de56288b56f3d2849576530bd7ce1bb4f4ef18c3d475d6e3d
redhat-pki-tps-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: 4739452df7f86000c90e7ccba56f38de24a93ad8805ca16eca13fd7d95095ccd
redhat-pki-tps-debuginfo-10.13.14-1.module+el8pki+24697+be195eea.x86_64.rpm SHA-256: eb512d6665e4d66e679fdba5ff4839ca12b76158abbd7760179ea3d19590b09f
tomcatjss-7.7.4-1.module+el8pki+21738+33a5e23b.noarch.rpm SHA-256: 996bf69e12582c53c3e03d35a79c139613a6b7e8db9c59bcf63205368340ee6a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.