CSS level 3 + SVG profile throws errors “#<hex> is not a fill/stroke value”, but code looks right (?)

[tripu]

When validating w3.org/TR/2016/CR-secure-contexts-20160915 with profile CSS level 3 + SVG, the validator complains: “# is not a fill/stroke value” four times.

The offending chunk seems to be:

.secure {
  fill: #88FF88;
}
.non-secure {
  fill: #FF8888;
  stroke-dasharray: 5px, 5px;
}
text.rejection {
  fill: #FF0000;
  font-weight: 700;
  font-size: 2em;
}
g path {
  stroke-width: 2;
  stroke: #666666;
  fill-opacity: 0;
  stroke-dasharray: 5px, 5px;
}