RLSA-2025:14126

See a problem?
Please try reporting it to the source first.

Source

https://errata.rockylinux.org/RLSA-2025:14126

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json

JSON Data

https://api.test.osv.dev/v1/vulns/RLSA-2025:14126

Upstream

CVE-2025-52999

Published

2025-09-08T14:19:16.612452Z

Modified

2025-09-08T14:49:13.001510Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Important: pki-deps:10.6 security update

Details

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:8

apache-commons-collections

Package

Name: apache-commons-collections
Purl: pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.2.2-10.module+el8.10.0+1763+c7c02164

apache-commons-collections

Package

Name: apache-commons-collections
Purl: pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.2.2-10.module+el8.10.0+2052+1b0fb438

apache-commons-collections

Package

Name: apache-commons-collections
Purl: pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.2.2-10.module+el8.3.0+74+855e3f5d

apache-commons-lang

Package

Name: apache-commons-lang
Purl: pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.6-21.module+el8.10.0+1763+c7c02164

apache-commons-lang

Package

Name: apache-commons-lang
Purl: pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.6-21.module+el8.3.0+74+855e3f5d

apache-commons-net

Package

Name: apache-commons-net
Purl: pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6-3.module+el8.10.0+1763+c7c02164

apache-commons-net

Package

Name: apache-commons-net
Purl: pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6-3.module+el8.10.0+2052+1b0fb438

apache-commons-net

Package

Name: apache-commons-net
Purl: pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6-3.module+el8.3.0+74+855e3f5d

bea-stax

Package

Name: bea-stax
Purl: pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.0-16.module+el8.10.0+1763+c7c02164

bea-stax

Package

Name: bea-stax
Purl: pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.0-16.module+el8.10.0+2052+1b0fb438

glassfish-fastinfoset

Package

Name: glassfish-fastinfoset
Purl: pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.13-9.module+el8.10.0+1763+c7c02164

glassfish-fastinfoset

Package

Name: glassfish-fastinfoset
Purl: pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.13-9.module+el8.10.0+2052+1b0fb438

glassfish-jaxb

Package

Name: glassfish-jaxb
Purl: pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.2.11-12.module+el8.10.0+2052+1b0fb438

glassfish-jaxb

Package

Name: glassfish-jaxb
Purl: pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.2.11-12.module+el8.10.0+1763+c7c02164

glassfish-jaxb-api

Package

Name: glassfish-jaxb-api
Purl: pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.2.12-8.module+el8.10.0+1763+c7c02164

glassfish-jaxb-api

Package

Name: glassfish-jaxb-api
Purl: pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.2.12-8.module+el8.10.0+2052+1b0fb438

jackson-annotations

Package

Name: jackson-annotations
Purl: pkg:rpm/rocky-linux/jackson-annotations?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.19.1-1.module+el8.10.0+2052+1b0fb438

jackson-core

Package

Name: jackson-core
Purl: pkg:rpm/rocky-linux/jackson-core?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.19.1-1.module+el8.10.0+2052+1b0fb438

jackson-databind

Package

Name: jackson-databind
Purl: pkg:rpm/rocky-linux/jackson-databind?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.19.1-1.module+el8.10.0+2052+1b0fb438

jakarta-commons-httpclient

Package

Name: jakarta-commons-httpclient
Purl: pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.1-28.module+el8.10.0+2052+1b0fb438

jakarta-commons-httpclient

Package

Name: jakarta-commons-httpclient
Purl: pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.1-28.module+el8.10.0+1763+c7c02164

jakarta-commons-httpclient

Package

Name: jakarta-commons-httpclient
Purl: pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:3.1-28.module+el8.3.0+74+855e3f5d

javassist

Package

Name: javassist
Purl: pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.18.1-8.module+el8.10.0+1763+c7c02164

javassist

Package

Name: javassist
Purl: pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.18.1-8.module+el8.10.0+2052+1b0fb438

javassist

Package

Name: javassist
Purl: pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.18.1-8.module+el8.3.0+74+855e3f5d

pki-servlet-engine

Package

Name: pki-servlet-engine
Purl: pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.0.62-1.module+el8.10.0+1767+f923f786

pki-servlet-engine

Package

Name: pki-servlet-engine
Purl: pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.0.62-1.module+el8.10.0+2052+1b0fb438

relaxngDatatype

Package

Name: relaxngDatatype
Purl: pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2011.1-7.module+el8.10.0+1763+c7c02164

relaxngDatatype

Package

Name: relaxngDatatype
Purl: pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2011.1-7.module+el8.10.0+2052+1b0fb438

slf4j

Package

Name: slf4j
Purl: pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.25-4.module+el8.10.0+2052+1b0fb438

slf4j

Package

Name: slf4j
Purl: pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.25-4.module+el8.6.0+843+5a13dac3

slf4j

Package

Name: slf4j
Purl: pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.25-4.module+el8.10.0+1763+c7c02164

slf4j

Package

Name: slf4j
Purl: pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.25-4.module+el8.10.0+2003+8aeac9cb

slf4j

Package

Name: slf4j
Purl: pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.25-4.module+el8.3.0+74+855e3f5d

stax-ex

Package

Name: stax-ex
Purl: pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.7-8.module+el8.10.0+2052+1b0fb438

stax-ex

Package

Name: stax-ex
Purl: pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7.7-8.module+el8.10.0+1763+c7c02164

velocity

Package

Name: velocity
Purl: pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7-24.module+el8.10.0+2052+1b0fb438

velocity

Package

Name: velocity
Purl: pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7-24.module+el8.10.0+1763+c7c02164

velocity

Package

Name: velocity
Purl: pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.7-24.module+el8.3.0+74+855e3f5d

xalan-j2

Package

Name: xalan-j2
Purl: pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.7.1-38.module+el8.10.0+1763+c7c02164

xalan-j2

Package

Name: xalan-j2
Purl: pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.7.1-38.module+el8.10.0+2052+1b0fb438

xalan-j2

Package

Name: xalan-j2
Purl: pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.7.1-38.module+el8.3.0+74+855e3f5d

xerces-j2

Package

Name: xerces-j2
Purl: pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.11.0-34.module+el8.10.0+2052+1b0fb438

xerces-j2

Package

Name: xerces-j2
Purl: pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.11.0-34.module+el8.10.0+1763+c7c02164

xerces-j2

Package

Name: xerces-j2
Purl: pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.11.0-34.module+el8.3.0+74+855e3f5d

xml-commons-apis

Package

Name: xml-commons-apis
Purl: pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.4.01-25.module+el8.10.0+1763+c7c02164

xml-commons-apis

Package

Name: xml-commons-apis
Purl: pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.4.01-25.module+el8.10.0+2052+1b0fb438

xml-commons-apis

Package

Name: xml-commons-apis
Purl: pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.4.01-25.module+el8.3.0+74+855e3f5d

xml-commons-apis

Package

Name: xml-commons-apis
Purl: pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.4.01-25.module+el8.10.0+2003+8aeac9cb

xml-commons-resolver

Package

Name: xml-commons-resolver
Purl: pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2-26.module+el8.10.0+1763+c7c02164

xml-commons-resolver

Package

Name: xml-commons-resolver
Purl: pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2-26.module+el8.10.0+2052+1b0fb438

xml-commons-resolver

Package

Name: xml-commons-resolver
Purl: pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2-26.module+el8.3.0+74+855e3f5d

xmlstreambuffer

Package

Name: xmlstreambuffer
Purl: pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.4-8.module+el8.10.0+2052+1b0fb438

xmlstreambuffer

Package

Name: xmlstreambuffer
Purl: pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.4-8.module+el8.10.0+1763+c7c02164

xsom

Package

Name: xsom
Purl: pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0-19.20110809svn.module+el8.10.0+1763+c7c02164

xsom

Package

Name: xsom
Purl: pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438