elsa-2026-43218

{
  "cves": [
    "CVE-2026-54513"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "apache-commons-collections\n[3.2.2-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[3.2.2-9]\n- Remove workaround for symlink-directory rpm bug\n\n[3.2.2-8]\n- Allow testframework to still be built even with tests disabled, which is\n  needed by other packages\n\n[3.2.2-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[3.2.2-6]\n- Temporarly disable running tests\n\n[3.2.2-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[3.2.2-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[3.2.2-3]\n- Add workaround for symlink-directory rpm bug\n\n[3.2.2-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[3.2.2-1]\n- Update to upstream version 3.2.2\n- Merge two javadoc subpackages\n- Install with XMVn\n- Specfile cleanup\n\napache-commons-lang\n[2.6-21]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.6-20]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2.6-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[2.6-18]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[2.6-17]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[2.6-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[2.6-15]\n- Drop old jakarta provides/obsoletes.\n\n[2.6-14]\n- Use Requires: java-headless rebuild (#1067528)\n\n[2.6-13]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild\n\n[2.6-12]\n- Rebuild\n\napache-commons-net\n[3.6-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[3.6-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[3.6-1]\n- Update to upstream version 3.6\n\n[3.5-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[3.5-1]\n- Update to upstream version 3.5\n\n[3.4-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[3.4-2]\n- Add workaround for suprious test failure (NET-586)\n\n[3.4-1]\n- Update to upstream version 3.4\n\n[3.3-7]\n- Disable failing test\n\n[3.3-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\nbea-stax\n[1.2.0-16]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.2.0-15]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.2.0-14]\n- Install with XMvn\n\n[1.2.0-13]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1.2.0-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1.2.0-11]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1.2.0-10]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[1.2.0-9]\n- Use .mfiles generated during build\n\n[1.2.0-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild\n\n[1.2.0-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\n\nglassfish-fastinfoset\n[1.2.13-9]\n- Regenerate BRs\n\n[1.2.13-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.2.13-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.2.13-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1.2.13-5]\n- add missing build requires\n\n[1.2.13-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1.2.13-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1.2.13-2]\n- introduce license macro\n\n[1.2.13-1]\n- update to 1.2.13\n- Fix URL\n- Add license text\n\n[1.2.12-11]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\nglassfish-jaxb\n[2.2.11-12]\n- Update requiremnts to avoid conflicts with jaxb module packages\n\n[2.2.11-11]\n- Avoid dependencies on msv and glassfish-dtd-parser\n\n[2.2.11-10]\n- Disable TXW2 compiler module\n\n[2.2.11-9]\n- Reduce build deps\n\n[2.2.11-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.2.11-7]\n- Specify CDDL license version\n\n[2.2.11-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2.2.11-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[2.2.11-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[2.2.11-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\nglassfish-jaxb-api\n[2.2.12-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.2.12-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2.2.12-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[2.2.12-5]\n- Regenerate BRs\n\n[2.2.12-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[2.2.12-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[2.2.12-2]\n- Update to 2.2.12-b141001.1542\n\n[2.2.12-1]\n- Update to 2.2.12\n\n[2.2.9-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[2.2.9-5]\n- Use Requires: java-headless rebuild (#1067528)\n\njackson-annotations\n[2.21-1]\n- Rebase to version 2.21\n- Resolves: RHEL-188291\n\njackson-core\n[2.21.4-1]\n- Rebase to version 2.21.4\n- Resolves: RHEL-188291\n\njackson-databind\n[2.21.4-1]\n- Rebase to upstream version 2.21.4\n- Resolves: RHEL-188291\n\njackson-jaxrs-providers\n[2.21.4-1]\n- Rebase to upstream version 2.21.4\n- Resolves: RHEL-188291\n\njackson-modules-base\n[2.21.4-1]\n- Update to version 2.21.4\n- Resolves: RHEL-188291\n\njakarta-commons-httpclient\n[1:3.1-28]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1:3.1-27]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1:3.1-26]\n- Use build-jar-repository for locating dependencies\n\n[1:3.1-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1:3.1-24]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1:3.1-23]\n- Respect configured SO_TIMEOUT during SSL handshake\n- Resolves: CVE-2015-5262\n\n[1:3.1-22]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1:3.1-21]\n- Remove legacy Obsoletes/Provides\n\n[1:3.1-20]\n- Fix MITM security vulnerability\n- Resolves: CVE-2014-3577\n\n[1:3.1-19]\n- Add alias for apache:commons-httpclient\n\njavassist\n[3.18.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[3.18.1-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[3.18.1-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[3.18.1-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[3.18.1-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[3.18.1-3]\n- Simplify build dependencies\n\n[3.18.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[3.18.1-1]\n- Update to upstream version 3.18.1\n- Remove workaround for rpm bug, can be removed in F-18\n- Update to current packaging guidelines\n\n[3.16.1-7]\n- Use Requires: java-headless rebuild (#1067528)\n\n[3.16.1-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild\n\npki-servlet-engine\n[1:9.0.62-1]\n- Bump version number to avoid conflicts with tomcat\n\n[1:9.0.30-4]\n- Convert pki-servlet-engine into an alias for tomcat\n\n[1:9.0.30-3]\n- Reverts: rhbz#1969366 as it causes other issues\n\n[1:9.0.30-2]\n- Resolves: rhbz#1969366 CA instance installation fails with error message\n\n[1:9.0.30-1]\n- Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30\n- Update to JWS 5.3.0 distribution\n- Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)\n\n[1:9.0.7-16]\n- Obsoleted pki-servlet-container\n\n[1:9.0.7-15]\n- Rename pki-servlet-container into pki-servlet-engine\n\n[1:9.0.7-14]\n- Update to JWS 5.0.2 distribution\n- Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client\n- Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins\n- Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up\n- Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet\n\n[1:9.0.7-13]\n- Reinstate Maven artifacts and fix maven-metadata JAR path\n\n[1:9.0.7-12]\n- Add missing BuildRequires: systemd-units\n\nrelaxngDatatype\n[2011.1-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2011.1-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2011.1-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[2011.1-4]\n- Add missing build-requires\n\n[2011.1-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[2011.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[2011.1-1]\n- Update to version released from new project location rhbz#981275\n- Build/install with maven instead of ant\n- Drop old javadoc rpm bug workaround\n\n[1.0-12.5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[1.0-11.5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild\n\n[1.0-10.5]\n- Install license file with javadoc package\n- Convert versioned javadoc to versionless\n- Update to current packaging guidelines\n- Remove msv provides and obsoletes\n\nslf4j\n[0:1.7.25-4]\n- Disallow EventData deserialization by default (CVE-2018-8088)\n- Resolves rhbz#1549928\n\n[0:1.7.25-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[0:1.7.25-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0:1.7.25-1]\n- Update to upstream version 1.7.25\n\n[0:1.7.22-4]\n- Avoid absolute paths\n\n[0:1.7.22-3]\n- Avoid literal carriage return\n- Remove Group tag\n\n[0:1.7.22-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[0:1.7.22-1]\n- Update to upstream version 1.7.22\n\n[0:1.7.21-4]\n- Install source JARs in separate package\n\n[0:1.7.21-3]\n- Remove build-requires on perl\n\nstax-ex\n[1.7.7-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.7.7-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.7.7-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1.7.7-5]\n- regenerate build-requires\n\n[1.7.7-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1.7.7-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1.7.7-2]\n- introduce license macro\n\n[1.7.7-1]\n- update to 1.7.7\n\n[1.7.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[1.7.1-7]\n- Use Requires: java-headless rebuild (#1067528)\n\nvelocity\n[0:1.7-24]\n- Repack the tarball without binaries\n\n[0:1.7-23]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[0:1.7-22]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[0:1.7-21]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0:1.7-20]\n- Add hsqldb conditional\n- Switch to glassfish-servlet-api\n\n[0:1.7-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[0:1.7-18]\n- fix FTBFS rhbz#1240035\n- fix BR list, change log4j with log4j12\n- set javac source/target to 1.6\n- disable Java8doc doclint\n- remove werken-xpath Import/Export refences in manifest file\n- resolve some rpmlint problems\n- remove zero-length file\n- introduce license macro\n\n[0:1.7-17]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[0:1.7-16]\n- Update to current packaging guidelines\n\n[0:1.7-15]\n- Require hsqldb-lib instead of hsqldb\n\nxalan-j2\n[0:2.7.1-38]\n- Update license of subpackages\n\n[0:2.7.1-37]\n- Remove BR on xml-stylebook\n\n[0:2.7.1-36]\n- Repack the tarball without binaries\n\n[0:2.7.1-35]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[0:2.7.1-34]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[0:2.7.1-33]\n- Elimitate race condition when injecting JAR manifest\n- Resolves: rhbz#1495250\n\n[0:2.7.1-32]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0:2.7.1-31]\n- Fix missing jaxp_transformer_impl symlink after upgrade\n\n[0:2.7.1-30]\n- Install with XMvn\n- Remove alternatives\n\n[0:2.7.1-29]\n- Build against glassfish-servlet-api\n\nxerces-j2\n[2.11.0-34]\n- Fix license tag to include W3C\n\n[2.11.0-33]\n- Add requirement on javapackages-tools since scripts use\n  java-functions.\n\n[2.11.0-32]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[2.11.0-31]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.11.0-30]\n- Remove unneeded dependency on dejavu-sans-fonts\n\n[2.11.0-29]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[2.11.0-28]\n- Fix missing jaxp_parser_impl symlink after upgrade\n\n[2.11.0-27]\n- Remove alternatives, there is no other provider\n- Specfile cleanup\n\n[2.11.0-26]\n- Install with XMvn\n\n[2.11.0-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\nxml-commons-apis\n[1.4.01-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.4.01-24]\n- Elimitate race condition when injecting JAR manifest\n- Resolves: rhbz#1495249\n\n[1.4.01-23]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.4.01-22]\n- Update to current packaging guidelines\n\n[1.4.01-21]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1.4.01-20]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1.4.01-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1.4.01-18]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[1.4.01-17]\n- Don't generate duplicate Maven metadata\n\n[1.4.01-16]\n- Use .mfiles generated during build\n\nxml-commons-resolver\n[0:1.2-26]\n- Add requirement on javapackages-tools since scripts use\n  java-functions.\n\n[0:1.2-25]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[0:1.2-24]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[0:1.2-23]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0:1.2-22]\n- Update to current packaging guidelines\n\n[0:1.2-21]\n- Fix rpm conditional\n\n[0:1.2-20]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[0:1.2-19]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[0:1.2-18]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[0:1.2-17]\n- Fix FTBFS.\n\nxmlstreambuffer\n[1.5.4-8]\n- Avoid test dependencies\n\n[1.5.4-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.5.4-6]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.5.4-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[1.5.4-4]\n- add missing build requires: maven-plugin-bundle\n\n[1.5.4-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[1.5.4-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[1.5.4-1]\n- update to 1.5.4\n- introduce license macro\n\n[1.5.1-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[1.5.1-4]\n- Use Requires: java-headless rebuild (#1067528)\n\nxsom\n[0-19.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[0-18.20110809svn]\n- Specify CDDL license version\n\n[0-17.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0-16.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild\n\n[0-15.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[0-14.20110809svn]\n- Fix FTBFS\n\n[0-13.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[0-12.20110809svn]\n- Fix junit BRs (#1107359)\n- Fix FTBFS due to F21 XMvn changes\n\n[0-11.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[0-10.20110809svn]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild",
  "id": "ELSA-2026-43218",
  "ovalId": "oval:com.oracle.elsa:def:202643218",
  "source": "oracle_linux",
  "title": "ELSA-2026-43218:  pki-deps:10.6 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-43218.html"
}