{
  "cves": [
    "CVE-2026-68498",
    "CVE-2026-89425",
    "CVE-2026-91777"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "apache-commons-collections\napache-commons-lang\n[2.6-21]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\napache-commons-net\nbea-stax\n[1.2.0-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nglassfish-fastinfoset\n[1.2.13-9]\n- Regenerate BRs\n\n[1.2.13-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nglassfish-jaxb\nglassfish-jaxb-api\n[2.2.12-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\njackson-annotations\n[2.21-1]\n- Rebase to version 2.21\n- Resolves: RHEL-188291\n\njackson-core\n[2.21.4-1.3]\n- Fix patch order\n- Resolves: RHEL-287959\n\n[2.21.4-1.2]\n- Fix CVE-2026-68498\n- Resolves: RHEL-287959\n\n[2.21.4-1.1]\n- Fix CVE-2026-89425\n- Resolves: RHEL-284419\n\njackson-databind\n[2.21.4-1.1]\n- Fix CVE-2026-91777\n- Resolves: RHEL-284554\n\njackson-jaxrs-providers\n[2.21.4-1]\n- Rebase to upstream version 2.21.4\n- Resolves: RHEL-188291\n\njackson-modules-base\n[2.21.4-1]\n- Update to version 2.21.4\n- Resolves: RHEL-188291\n\njakarta-commons-httpclient\n[1:3.1-28]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\njavassist\n[3.18.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\npki-servlet-engine\nrelaxngDatatype\n[2011.1-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nslf4j\n[0:1.7.25-4]\n- Disallow EventData deserialization by default (CVE-2018-8088)\n- Resolves rhbz#1549928\n\n[0:1.7.25-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nstax-ex\n[1.7.7-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nvelocity\nxalan-j2\n[0:2.7.1-38]\n- Update license of subpackages\n\n[0:2.7.1-37]\n- Remove BR on xml-stylebook\n\n[0:2.7.1-36]\n- Repack the tarball without binaries\n\n[0:2.7.1-35]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\nxerces-j2\nxml-commons-apis\n[1.4.01-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nxml-commons-resolver\nxmlstreambuffer\n[1.5.4-8]\n- Avoid test dependencies\n\n[1.5.4-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nxsom\n[0-19.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild",
  "id": "ELSA-2026-90909",
  "ovalId": "oval:com.oracle.elsa:def:202690909",
  "source": "oracle_linux",
  "title": "ELSA-2026-90909:  pki-deps:10.6 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90909.html"
}