elsa-2026-85234

oracle_linux
Description

[3.0.26-20.1] - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) - Resolves: RHEL-278032 - Resolves: RHEL-277999

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-89058",
    "CVE-2026-89059"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[3.0.26-20.1]\n- Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)\n- Resolves: RHEL-278032\n- Resolves: RHEL-277999",
  "id": "ELSA-2026-85234",
  "ovalId": "oval:com.oracle.elsa:def:202685234",
  "source": "oracle_linux",
  "title": "ELSA-2026-85234:  resteasy security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-85234.html"
}
View JSON API Download JSON