ELSA-2026-85234

ELSA-2026-85234 - resteasy security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-19

Description


[3.0.26-20.1]
- Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config
- Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)
- Resolves: RHEL-278032
- Resolves: RHEL-277999


Related CVEs


CVE-2026-89058
CVE-2026-89059

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) resteasy-3.0.26-20.el9_8.1.src.rpmc2ffa7b394cef3ee00f32ebf3880feb928b1c41881c8e79f5801bb1f6297eda4-ol9_aarch64_appstream
pki-resteasy-client-3.0.26-20.el9_8.1.noarch.rpm9f5fbe6be98d5e060f2dd1ea8ea27de94f865733d4fd20d4f5db38a9cf62c350-ol9_aarch64_appstream
pki-resteasy-core-3.0.26-20.el9_8.1.noarch.rpm3400a852f6c69e5521f3af58672d306b78d6be2818e19206689deb14fa670247-ol9_aarch64_appstream
pki-resteasy-jackson2-provider-3.0.26-20.el9_8.1.noarch.rpm6e90e4bf31b6378589a09922cbc9bd30900ca2978810093c10d299584f4a2e44-ol9_aarch64_appstream
pki-resteasy-servlet-initializer-3.0.26-20.el9_8.1.noarch.rpmb1566376fda04adcbfd1cb5aa27e184d918cdb25db078ca798049aa1c485cf3f-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) resteasy-3.0.26-20.el9_8.1.src.rpmc2ffa7b394cef3ee00f32ebf3880feb928b1c41881c8e79f5801bb1f6297eda4-ol9_x86_64_appstream
pki-resteasy-client-3.0.26-20.el9_8.1.noarch.rpm9f5fbe6be98d5e060f2dd1ea8ea27de94f865733d4fd20d4f5db38a9cf62c350-ol9_x86_64_appstream
pki-resteasy-core-3.0.26-20.el9_8.1.noarch.rpm3400a852f6c69e5521f3af58672d306b78d6be2818e19206689deb14fa670247-ol9_x86_64_appstream
pki-resteasy-jackson2-provider-3.0.26-20.el9_8.1.noarch.rpm6e90e4bf31b6378589a09922cbc9bd30900ca2978810093c10d299584f4a2e44-ol9_x86_64_appstream
pki-resteasy-servlet-initializer-3.0.26-20.el9_8.1.noarch.rpmb1566376fda04adcbfd1cb5aa27e184d918cdb25db078ca798049aa1c485cf3f-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete