{
  "cves": [
    "CVE-2026-89058",
    "CVE-2026-89059",
    "CVE-2026-89407"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[11.9.0-6.0.1.el10_2.1]\n- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.\n\n[11.9.0-6.1]\n- Update jackson-core, jackson-databind and resteasy\n- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode\n- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking\n- Resolves: RHEL-263173\n- Resolves: RHEL-263615\n- Resolves: RHEL-272193",
  "id": "ELSA-2026-92408",
  "ovalId": "oval:com.oracle.elsa:def:202692408",
  "source": "oracle_linux",
  "title": "ELSA-2026-92408:  dogtag-pki security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-92408.html"
}