RLSA-2026:90909

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2026:90909
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2026:90909
Upstream
CVE (3)
Published
2026-10-29T12:01:16Z
Modified
2026-10-29T12:30:03Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Important: pki-deps:10.6 security update
Details

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425)

  • com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)

  • com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific 
{
    "license":  "CC-BY-4.0",
    "license_url":  "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory":  "RHSA-2026:90909"
}
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:8
apache-commons-collections

Package

Name
apache-commons-collections
Purl
pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.2.2-10.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-collections

Package

Name
apache-commons-collections
Purl
pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.2.2-10.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-collections

Package

Name
apache-commons-collections
Purl
pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.2.2-10.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-lang

Package

Name
apache-commons-lang
Purl
pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.6-21.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-lang

Package

Name
apache-commons-lang
Purl
pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.6-21.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-net

Package

Name
apache-commons-net
Purl
pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.6-3.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-net

Package

Name
apache-commons-net
Purl
pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.6-3.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
apache-commons-net

Package

Name
apache-commons-net
Purl
pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.6-3.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
bea-stax

Package

Name
bea-stax
Purl
pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2.0-16.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
bea-stax

Package

Name
bea-stax
Purl
pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2.0-16.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-fastinfoset

Package

Name
glassfish-fastinfoset
Purl
pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2.13-9.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-fastinfoset

Package

Name
glassfish-fastinfoset
Purl
pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2.13-9.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-jaxb

Package

Name
glassfish-jaxb
Purl
pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.2.11-12.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-jaxb

Package

Name
glassfish-jaxb
Purl
pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.2.11-12.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-jaxb-api

Package

Name
glassfish-jaxb-api
Purl
pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.2.12-8.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
glassfish-jaxb-api

Package

Name
glassfish-jaxb-api
Purl
pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.2.12-8.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-annotations

Package

Name
jackson-annotations
Purl
pkg:rpm/rocky-linux/jackson-annotations?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21-1.module+el8.10.0+40260+021059e6
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-core

Package

Name
jackson-core
Purl
pkg:rpm/rocky-linux/jackson-core?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-1.module+el8.10.0+40260+021059e6
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-core

Package

Name
jackson-core
Purl
pkg:rpm/rocky-linux/jackson-core?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.3
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-databind

Package

Name
jackson-databind
Purl
pkg:rpm/rocky-linux/jackson-databind?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.1
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-databind

Package

Name
jackson-databind
Purl
pkg:rpm/rocky-linux/jackson-databind?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-1.module+el8.10.0+40260+021059e6
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-jaxrs-providers

Package

Name
jackson-jaxrs-providers
Purl
pkg:rpm/rocky-linux/jackson-jaxrs-providers?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-1.module+el8.10.0+40260+021059e6
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jackson-modules-base

Package

Name
jackson-modules-base
Purl
pkg:rpm/rocky-linux/jackson-modules-base?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.21.4-2.module+el8.10.0+40260+021059e6
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jakarta-commons-httpclient

Package

Name
jakarta-commons-httpclient
Purl
pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.1-28.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jakarta-commons-httpclient

Package

Name
jakarta-commons-httpclient
Purl
pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.1-28.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
jakarta-commons-httpclient

Package

Name
jakarta-commons-httpclient
Purl
pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:3.1-28.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
javassist

Package

Name
javassist
Purl
pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.18.1-8.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
javassist

Package

Name
javassist
Purl
pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.18.1-8.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
javassist

Package

Name
javassist
Purl
pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:3.18.1-8.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
pki-servlet-engine

Package

Name
pki-servlet-engine
Purl
pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.62-1.module+el8.10.0+1767+f923f786
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
pki-servlet-engine

Package

Name
pki-servlet-engine
Purl
pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.0.62-1.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
relaxngDatatype

Package

Name
relaxngDatatype
Purl
pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2011.1-7.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
relaxngDatatype

Package

Name
relaxngDatatype
Purl
pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2011.1-7.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
slf4j

Package

Name
slf4j
Purl
pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.25-4.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
slf4j

Package

Name
slf4j
Purl
pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.25-4.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
slf4j

Package

Name
slf4j
Purl
pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.25-4.module+el8.6.0+843+5a13dac3
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
slf4j

Package

Name
slf4j
Purl
pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.25-4.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
slf4j

Package

Name
slf4j
Purl
pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.25-4.module+el8.10.0+2003+8aeac9cb
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
stax-ex

Package

Name
stax-ex
Purl
pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.7-8.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
stax-ex

Package

Name
stax-ex
Purl
pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7.7-8.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
velocity

Package

Name
velocity
Purl
pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7-24.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
velocity

Package

Name
velocity
Purl
pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7-24.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
velocity

Package

Name
velocity
Purl
pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.7-24.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xalan-j2

Package

Name
xalan-j2
Purl
pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.7.1-38.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xalan-j2

Package

Name
xalan-j2
Purl
pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.7.1-38.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xalan-j2

Package

Name
xalan-j2
Purl
pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.7.1-38.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xerces-j2

Package

Name
xerces-j2
Purl
pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.11.0-34.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xerces-j2

Package

Name
xerces-j2
Purl
pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.11.0-34.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xerces-j2

Package

Name
xerces-j2
Purl
pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.11.0-34.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-apis

Package

Name
xml-commons-apis
Purl
pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.4.01-25.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-apis

Package

Name
xml-commons-apis
Purl
pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.4.01-25.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-apis

Package

Name
xml-commons-apis
Purl
pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.4.01-25.module+el8.10.0+2003+8aeac9cb
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-apis

Package

Name
xml-commons-apis
Purl
pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.4.01-25.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-resolver

Package

Name
xml-commons-resolver
Purl
pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2-26.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-resolver

Package

Name
xml-commons-resolver
Purl
pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2-26.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xml-commons-resolver

Package

Name
xml-commons-resolver
Purl
pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.2-26.module+el8.3.0+74+855e3f5d
Database specific
Show details 
{
    "yum_repository":  "PowerTools"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xmlstreambuffer

Package

Name
xmlstreambuffer
Purl
pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.5.4-8.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xmlstreambuffer

Package

Name
xmlstreambuffer
Purl
pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:1.5.4-8.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xsom

Package

Name
xsom
Purl
pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:0-19.20110809svn.module+el8.10.0+1763+c7c02164
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"
xsom

Package

Name
xsom
Purl
pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438
Database specific
Show details 
{
    "yum_repository":  "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:90909.json"