ELSA-2026-92408

ELSA-2026-92408 - dogtag-pki security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-29

Description

[11.9.0-6.0.1.el10_2.1]
- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.

[11.9.0-6.1]
- Update jackson-core, jackson-databind and resteasy
- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode
- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config
- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking
- Resolves: RHEL-263173
- Resolves: RHEL-263615
- Resolves: RHEL-272193

Related CVEs

CVE-2026-89058

CVE-2026-89059

CVE-2026-89407

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	dogtag-pki-11.9.0-6.0.1.el10_2.1.src.rpm	62814961f4937900b0a1af15f6960f8de0cb9d724f67a3287c822ea77a623a2b	-	ol10_aarch64_appstream
	idm-pki-acme-11.9.0-6.0.1.el10_2.1.noarch.rpm	6f3db93847b29e4267ba89f10eb3a989f9417dc91097214591bfba7ba303b4ee	-	ol10_aarch64_appstream
	idm-pki-base-11.9.0-6.0.1.el10_2.1.noarch.rpm	d2847e7b9c815ff7fc4704a95ea05a133b54dd79f96fcf25e3afd583d74423be	-	ol10_aarch64_appstream
	idm-pki-ca-11.9.0-6.0.1.el10_2.1.noarch.rpm	482396983447ce888a0bffe67bfe2ab910558e2d1f9a6d3982ccc819f27e688b	-	ol10_aarch64_appstream
	idm-pki-java-11.9.0-6.0.1.el10_2.1.noarch.rpm	261837babbda0ee86cd8e0dd7a88ef317e07e18706407487137de7b3ce7aabb2	-	ol10_aarch64_appstream
	idm-pki-kra-11.9.0-6.0.1.el10_2.1.noarch.rpm	b05e9b2955ef8e06352ffaed2897d8fc61981ae5fea619149f386934c98d4683	-	ol10_aarch64_appstream
	idm-pki-server-11.9.0-6.0.1.el10_2.1.noarch.rpm	97e10538252431b6f5a9f324276727e60e343d061812c7e334657da0ac5dba42	-	ol10_aarch64_appstream
	idm-pki-tools-11.9.0-6.0.1.el10_2.1.aarch64.rpm	dc0a540a498bd8debae9fe7a02b0ec53f0810f5acb885461aecb39e172d4e49e	-	ol10_aarch64_appstream
	python3-idm-pki-11.9.0-6.0.1.el10_2.1.noarch.rpm	b14fe8f42daa580aba081ab8669b8a115ae61de4e52f9d04a0d1f7f823d08e59	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	dogtag-pki-11.9.0-6.0.1.el10_2.1.src.rpm	62814961f4937900b0a1af15f6960f8de0cb9d724f67a3287c822ea77a623a2b	-	ol10_x86_64_appstream
	idm-pki-acme-11.9.0-6.0.1.el10_2.1.noarch.rpm	6f3db93847b29e4267ba89f10eb3a989f9417dc91097214591bfba7ba303b4ee	-	ol10_x86_64_appstream
	idm-pki-base-11.9.0-6.0.1.el10_2.1.noarch.rpm	d2847e7b9c815ff7fc4704a95ea05a133b54dd79f96fcf25e3afd583d74423be	-	ol10_x86_64_appstream
	idm-pki-ca-11.9.0-6.0.1.el10_2.1.noarch.rpm	482396983447ce888a0bffe67bfe2ab910558e2d1f9a6d3982ccc819f27e688b	-	ol10_x86_64_appstream
	idm-pki-java-11.9.0-6.0.1.el10_2.1.noarch.rpm	261837babbda0ee86cd8e0dd7a88ef317e07e18706407487137de7b3ce7aabb2	-	ol10_x86_64_appstream
	idm-pki-kra-11.9.0-6.0.1.el10_2.1.noarch.rpm	b05e9b2955ef8e06352ffaed2897d8fc61981ae5fea619149f386934c98d4683	-	ol10_x86_64_appstream
	idm-pki-server-11.9.0-6.0.1.el10_2.1.noarch.rpm	97e10538252431b6f5a9f324276727e60e343d061812c7e334657da0ac5dba42	-	ol10_x86_64_appstream
	idm-pki-tools-11.9.0-6.0.1.el10_2.1.x86_64.rpm	c7a8af2e81da0777c442d88b3d6a4b29ac956ef5339197dca882222d0c50758f	-	ol10_x86_64_appstream
	python3-idm-pki-11.9.0-6.0.1.el10_2.1.noarch.rpm	b14fe8f42daa580aba081ab8669b8a115ae61de4e52f9d04a0d1f7f823d08e59	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team