[El-errata] ELSA-2026-92408 Important: Oracle Linux 10 dogtag-pki security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-92408

http://linux.oracle.com/errata/ELSA-2026-92408.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
idm-pki-acme-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-base-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-ca-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-java-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-kra-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-server-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-tools-11.9.0-6.0.1.el10_2.1.x86_64.rpm
python3-idm-pki-11.9.0-6.0.1.el10_2.1.noarch.rpm

aarch64:
idm-pki-acme-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-base-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-ca-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-java-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-kra-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-server-11.9.0-6.0.1.el10_2.1.noarch.rpm
idm-pki-tools-11.9.0-6.0.1.el10_2.1.aarch64.rpm
python3-idm-pki-11.9.0-6.0.1.el10_2.1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dogtag-pki-11.9.0-6.0.1.el10_2.1.src.rpm

Related CVEs:

CVE-2026-89058
CVE-2026-89059
CVE-2026-89407




Description of changes:

[11.9.0-6.0.1.el10_2.1]
- Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version.

[11.9.0-6.1]
- Update jackson-core, jackson-databind and resteasy
- Fix CVE-2026-89059: RESTEasy IIOImageProvider Unbounded Image Decode
- Fix CVE-2026-89058: RESTEasy CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config
- Fix CVE-2026-89407: Jackson-core: Denial of Service via regular expression backtracking
- Resolves: RHEL-263173
- Resolves: RHEL-263615
- Resolves: RHEL-272193