elsa-2026-92408

oracle_linux
Description

[11.9.0-6.0.1.el10_2.1] - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. [11.9.0-6.1] - Update jackson-core, jackson-databind and resteasy - Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode - Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking - Resolves: RHEL-263173 - Resolves: RHEL-263615 - Resolves: RHEL-272193

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-89058",
    "CVE-2026-89059",
    "CVE-2026-89407"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[11.9.0-6.0.1.el10_2.1]\n- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.\n\n[11.9.0-6.1]\n- Update jackson-core, jackson-databind and resteasy\n- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode\n- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config\n- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking\n- Resolves: RHEL-263173\n- Resolves: RHEL-263615\n- Resolves: RHEL-272193",
  "id": "ELSA-2026-92408",
  "ovalId": "oval:com.oracle.elsa:def:202692408",
  "source": "oracle_linux",
  "title": "ELSA-2026-92408:  dogtag-pki security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-92408.html"
}
View JSON API Download JSON