elsa-2026-90909

oracle_linux

Description

apache-commons-collections apache-commons-lang [2.6-21] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild apache-commons-net bea-stax [1.2.0-16] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild glassfish-fastinfoset [1.2.13-9] - Regenerate BRs [1.2.13-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild glassfish-jaxb glassfish-jaxb-api [2.2.12-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild jackson-annotations [2.21-1] - Rebase to version 2.21 - Resolves: RHEL-188291 jackson-core [2.21.4-1.3] - Fix patch order - Resolves: RHEL-287959 [2.21.4-1.2] - Fix CVE-2026-68498 - Resolves: RHEL-287959 [2.21.4-1.1] - Fix CVE-2026-89425 - Resolves: RHEL-284419 jackson-databind [2.21.4-1.1] - Fix CVE-2026-91777 - Resolves: RHEL-284554 jackson-jaxrs-providers [2.21.4-1] - Rebase to upstream version 2.21.4 - Resolves: RHEL-188291 jackson-modules-base [2.21.4-1] - Update to version 2.21.4 - Resolves: RHEL-188291 jakarta-commons-httpclient [1:3.1-28] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild javassist [3.18.1-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild pki-servlet-engine relaxngDatatype [2011.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild slf4j [0:1.7.25-4] - Disallow EventData deserialization by default (CVE-2018-8088) - Resolves rhbz#1549928 [0:1.7.25-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild stax-ex [1.7.7-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild velocity xalan-j2 [0:2.7.1-38] - Update license of subpackages [0:2.7.1-37] - Remove BR on xml-stylebook [0:2.7.1-36] - Repack the tarball without binaries [0:2.7.1-35] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild xerces-j2 xml-commons-apis [1.4.01-25] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild xml-commons-resolver xmlstreambuffer [1.5.4-8] - Avoid test dependencies [1.5.4-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild xsom [0-19.20110809svn] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-68498",
    "CVE-2026-89425",
    "CVE-2026-91777"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "apache-commons-collections\napache-commons-lang\n[2.6-21]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\napache-commons-net\nbea-stax\n[1.2.0-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nglassfish-fastinfoset\n[1.2.13-9]\n- Regenerate BRs\n\n[1.2.13-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nglassfish-jaxb\nglassfish-jaxb-api\n[2.2.12-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\njackson-annotations\n[2.21-1]\n- Rebase to version 2.21\n- Resolves: RHEL-188291\n\njackson-core\n[2.21.4-1.3]\n- Fix patch order\n- Resolves: RHEL-287959\n\n[2.21.4-1.2]\n- Fix CVE-2026-68498\n- Resolves: RHEL-287959\n\n[2.21.4-1.1]\n- Fix CVE-2026-89425\n- Resolves: RHEL-284419\n\njackson-databind\n[2.21.4-1.1]\n- Fix CVE-2026-91777\n- Resolves: RHEL-284554\n\njackson-jaxrs-providers\n[2.21.4-1]\n- Rebase to upstream version 2.21.4\n- Resolves: RHEL-188291\n\njackson-modules-base\n[2.21.4-1]\n- Update to version 2.21.4\n- Resolves: RHEL-188291\n\njakarta-commons-httpclient\n[1:3.1-28]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\njavassist\n[3.18.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\npki-servlet-engine\nrelaxngDatatype\n[2011.1-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nslf4j\n[0:1.7.25-4]\n- Disallow EventData deserialization by default (CVE-2018-8088)\n- Resolves rhbz#1549928\n\n[0:1.7.25-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nstax-ex\n[1.7.7-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nvelocity\nxalan-j2\n[0:2.7.1-38]\n- Update license of subpackages\n\n[0:2.7.1-37]\n- Remove BR on xml-stylebook\n\n[0:2.7.1-36]\n- Repack the tarball without binaries\n\n[0:2.7.1-35]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\nxerces-j2\nxml-commons-apis\n[1.4.01-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nxml-commons-resolver\nxmlstreambuffer\n[1.5.4-8]\n- Avoid test dependencies\n\n[1.5.4-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\nxsom\n[0-19.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild",
  "id": "ELSA-2026-90909",
  "ovalId": "oval:com.oracle.elsa:def:202690909",
  "source": "oracle_linux",
  "title": "ELSA-2026-90909:  pki-deps:10.6 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90909.html"
}

View JSON API Download JSON

elsa-2026-90909

Raw JSON Data