ELSA-2026-86706

ELSA-2026-86706 - jackson-core security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-21

Description

[2.21.6-1.2]
- Resolves: RHEL-286626
- CVE-2026-89425 jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing
unbounded StringBuilder growth during malformed token processing

[2.21.6-1.1]
- Resolves: RHEL-272199
- Fix CVE-2026-89407

Related CVEs

CVE-2026-89407

CVE-2026-89425

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	jackson-core-2.21.6-1.el9_8.2.src.rpm	cebb185cd5a4335fe1ddcaf61b635c7c9ed9dcd1c443d927d4436a6e4f6348d2	-	ol9_aarch64_appstream
	pki-jackson-core-2.21.6-1.el9_8.2.noarch.rpm	5396224bbb9695e663ce8cf45276359c0b96adf48da69a95b1487655eb1d83dc	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	jackson-core-2.21.6-1.el9_8.2.src.rpm	cebb185cd5a4335fe1ddcaf61b635c7c9ed9dcd1c443d927d4436a6e4f6348d2	-	ol9_x86_64_appstream
	pki-jackson-core-2.21.6-1.el9_8.2.noarch.rpm	5396224bbb9695e663ce8cf45276359c0b96adf48da69a95b1487655eb1d83dc	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team