{"cves":["CVE-2026-89058","CVE-2026-89059","CVE-2026-89407"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[11.9.0-6.0.1.el10_2.1]\n- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.\n\n[11.9.0-6.1]\n- Update jackson-core, jackson-databind and resteasy\n- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode\n- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking\n- Resolves: RHEL-263173\n- Resolves: RHEL-263615\n- Resolves: RHEL-272193","id":"ELSA-2026-92408","ovalId":"oval:com.oracle.elsa:def:202692408","source":"oracle_linux","title":"ELSA-2026-92408:  dogtag-pki security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-92408.html"}