Summary
[11.9.0-6.0.1.el10_2.1]
- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.
[11.9.0-6.1]
- Update jackson-core, jackson-databind and resteasy
- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode
- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config
- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking
- Resolves: RHEL-263173
- Resolves: RHEL-263615
- Resolves: RHEL-272193
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | idm-pki-acme | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-base | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-ca | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-java | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-kra | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-server | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | idm-pki-tools | 0:11.9.0-6.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-idm-pki | 0:11.9.0-6.0.1.el10_2.1 |
Vulnerabilities 3
-
High 7.5
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enor…
-
High 7.5
jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS
NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PAT…
-
High 7.4
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-ori…