/usr/share/pki/server/upgrade/ is in pki-server 10.6.0-1ubuntu2.
This file is owned by root:root, with mode 0o755.
..
/usr/share/pki/server/upgrade/10.0.1/
/usr/share/pki/server/upgrade/10.0.1/01-ReplaceRandomNumberGenerator
/usr/share/pki/server/upgrade/10.0.1/02-CloningInterfaceChanges
/usr/share/pki/server/upgrade/10.0.1/03-AddRestServlet
/usr/share/pki/server/upgrade/10.0.5/
/usr/share/pki/server/upgrade/10.0.5/01-EnableSessionInAuthenticator
/usr/share/pki/server/upgrade/10.0.99/
/usr/share/pki/server/upgrade/10.0.99/01-FixJavaOpts
/usr/share/pki/server/upgrade/10.0.99/02-RemoveAuthProperties
/usr/share/pki/server/upgrade/10.0.99/03-FixRegistryFile
/usr/share/pki/server/upgrade/10.0.99/04-FixLogFileOwnership
/usr/share/pki/server/upgrade/10.1.1/
/usr/share/pki/server/upgrade/10.1.1/01-MoveWebApplicationContextFile
/usr/share/pki/server/upgrade/10.1.99/
/usr/share/pki/server/upgrade/10.1.99/01-MoveWebApplicationContextFile
/usr/share/pki/server/upgrade/10.1.99/02-ReplaceJettisonWithJackson
/usr/share/pki/server/upgrade/10.1.99/03-AddedRESTEasyClient
/usr/share/pki/server/upgrade/10.1.99/04-ReplaceRESTEasyApplicationClass
/usr/share/pki/server/upgrade/10.1.99/05-RemoveConfigPathFromWebXML
/usr/share/pki/server/upgrade/10.2.1/
/usr/share/pki/server/upgrade/10.2.1/01-AddTLSRangeSupport
/usr/share/pki/server/upgrade/10.2.2/
/usr/share/pki/server/upgrade/10.2.2/01-MoveWebApplicationDeploymentLocations
/usr/share/pki/server/upgrade/10.2.2/02-EnableWebApplicationAutoDeploy
/usr/share/pki/server/upgrade/10.2.2/03-RemoveDependencyOnJackson2
/usr/share/pki/server/upgrade/10.2.3/
/usr/share/pki/server/upgrade/10.2.3/01-FixInstanceWorkFolderOwnership
/usr/share/pki/server/upgrade/10.2.3/02-FixBindPWPrompt
/usr/share/pki/server/upgrade/10.2.4/
/usr/share/pki/server/upgrade/10.2.4/01-AddMissingOCSPGETServletMappingToWebXML
/usr/share/pki/server/upgrade/10.2.4/02-FixNuxwdogListenerClass
/usr/share/pki/server/upgrade/10.2.5/
/usr/share/pki/server/upgrade/10.2.5/01-AddKraAuditEvents
/usr/share/pki/server/upgrade/10.2.6/
/usr/share/pki/server/upgrade/10.2.6/01-RemoveInaccessableURLsFromServerXML
/usr/share/pki/server/upgrade/10.2.6/02-AddPhoneHomeURLsToTPSsServerXML
/usr/share/pki/server/upgrade/10.3.0/
/usr/share/pki/server/upgrade/10.3.0/01-AllowEncodedSlash
/usr/share/pki/server/upgrade/10.3.0/02-AddAuthzRealmToRegistry
/usr/share/pki/server/upgrade/10.3.3/
/usr/share/pki/server/upgrade/10.3.3/01-FixJavaHome
/usr/share/pki/server/upgrade/10.3.5/
/usr/share/pki/server/upgrade/10.3.5/01-FixServerLibrary
/usr/share/pki/server/upgrade/10.3.5/02-FixDeploymentDescriptor
/usr/share/pki/server/upgrade/10.4.0/
/usr/share/pki/server/upgrade/10.4.0/01-UpdateAJPLoopbackAddress
/usr/share/pki/server/upgrade/10.4.0/02-MergePKIWebapps
/usr/share/pki/server/upgrade/10.4.0/03-AddCommonNameToSANDefaultToRegistry
/usr/share/pki/server/upgrade/10.4.0/04-AddExternalProcessConstraintToRegistry
/usr/share/pki/server/upgrade/10.4.2/
/usr/share/pki/server/upgrade/10.4.2/01-AddSessionAuthenticationPlugin
/usr/share/pki/server/upgrade/10.4.2/02-AddKRAWrappingParams
/usr/share/pki/server/upgrade/10.4.6/
/usr/share/pki/server/upgrade/10.4.6/01-UpdateKeepAliveTimeout
/usr/share/pki/server/upgrade/10.5.5/
/usr/share/pki/server/upgrade/10.5.5/01-AddTPSExternalRegISEtokenParams
/usr/share/pki/server/upgrade/10.6.0/
/usr/share/pki/server/upgrade/10.6.0/01-RemoveNSSDefault
/usr/share/pki/server/upgrade/10.6.0/02-FixServerConfiguration