RHSA-2025:14117: Important: pki-deps:10.6 security update
Published Aug 20, 2025
·Updated
Important: pki-deps:10.6 security update
Other sources
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.Security Fix(es): com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
75 affected componentsFixes available
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension
Red Hat Red Hat Enterprise Linux Server - TUS
redhat/apache-commons-collections<3.2.2-10.module+el8.1.0+3366+6dfb954c
3.2.2-10.module+el8.1.0+3366+6dfb954c
redhat/apache-commons-lang<2.6-21.module+el8.1.0+3366+6dfb954c
2.6-21.module+el8.1.0+3366+6dfb954c
redhat/apache-commons-net<3.6-3.module+el8.3.0+6805+72837426
3.6-3.module+el8.3.0+6805+72837426
redhat/bea-stax<1.2.0-16.module+el8.1.0+3366+6dfb954c
1.2.0-16.module+el8.1.0+3366+6dfb954c
redhat/fasterxml-oss-parent<69-3.module+el8.8.0+23396+b3893f62
69-3.module+el8.8.0+23396+b3893f62
redhat/glassfish-fastinfoset<1.2.13-9.module+el8.1.0+3366+6dfb954c
1.2.13-9.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb<2.2.11-11.module+el8.1.0+3366+6dfb954c
2.2.11-11.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb-api<2.2.12-8.module+el8.1.0+3366+6dfb954c
2.2.12-8.module+el8.1.0+3366+6dfb954c
redhat/jackson-annotations<2.19.1-3.module+el8.8.0+23396+b3893f62
2.19.1-3.module+el8.8.0+23396+b3893f62
redhat/jackson-bom<2.19.1-4.module+el8.8.0+23413+86800787
2.19.1-4.module+el8.8.0+23413+86800787
redhat/jackson-core<2.19.1-4.module+el8.8.0+23396+b3893f62
2.19.1-4.module+el8.8.0+23396+b3893f62
redhat/jackson-databind<2.19.1-1.module+el8.8.0+23396+b3893f62
2.19.1-1.module+el8.8.0+23396+b3893f62
redhat/jackson-jaxrs-providers<2.19.1-2.module+el8.8.0+23396+b3893f62
2.19.1-2.module+el8.8.0+23396+b3893f62
redhat/jackson-modules-base<2.19.1-1.module+el8.8.0+23405+763e93bf
2.19.1-1.module+el8.8.0+23405+763e93bf
redhat/jackson-parent<2.19.2-3.module+el8.8.0+23413+86800787
2.19.2-3.module+el8.8.0+23413+86800787
redhat/jakarta-commons-httpclient<3.1-28.module+el8.1.0+3366+6dfb954c
3.1-28.module+el8.1.0+3366+6dfb954c
redhat/javassist<3.18.1-8.module+el8.1.0+3366+6dfb954c
3.18.1-8.module+el8.1.0+3366+6dfb954c
redhat/pki-servlet-engine<9.0.62-1.module+el8.8.0+22367+4894538d
9.0.62-1.module+el8.8.0+22367+4894538d
redhat/python-nss<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/resteasy<3.0.26-7.module+el8.8.0+22365+b433a336
3.0.26-7.module+el8.8.0+22365+b433a336
redhat/slf4j<1.7.25-4.module+el8.1.0+3366+6dfb954c
1.7.25-4.module+el8.1.0+3366+6dfb954c
redhat/stax-ex<1.7.7-8.module+el8.2.0+5723+4574fbff
1.7.7-8.module+el8.2.0+5723+4574fbff
redhat/velocity<1.7-24.module+el8.1.0+3366+6dfb954c
1.7-24.module+el8.1.0+3366+6dfb954c
redhat/xalan-j2<2.7.1-38.module+el8.1.0+3366+6dfb954c
2.7.1-38.module+el8.1.0+3366+6dfb954c
redhat/xerces-j2<2.11.0-34.module+el8.1.0+3366+6dfb954c
2.11.0-34.module+el8.1.0+3366+6dfb954c
redhat/xml-commons-apis<1.4.01-25.module+el8.1.0+3366+6dfb954c
1.4.01-25.module+el8.1.0+3366+6dfb954c
redhat/xml-commons-resolver<1.2-26.module+el8.1.0+3366+6dfb954c
1.2-26.module+el8.1.0+3366+6dfb954c
redhat/xmlstreambuffer<1.5.4-8.module+el8.2.0+5723+4574fbff
1.5.4-8.module+el8.2.0+5723+4574fbff
redhat/xsom<0-19.20110809svn.module+el8.1.0+3366+6dfb954c
0-19.20110809svn.module+el8.1.0+3366+6dfb954c
redhat/apache-commons-collections<3.2.2-10.module+el8.1.0+3366+6dfb954c
3.2.2-10.module+el8.1.0+3366+6dfb954c
redhat/apache-commons-lang<2.6-21.module+el8.1.0+3366+6dfb954c
2.6-21.module+el8.1.0+3366+6dfb954c
redhat/apache-commons-net<3.6-3.module+el8.3.0+6805+72837426
3.6-3.module+el8.3.0+6805+72837426
redhat/bea-stax-api<1.2.0-16.module+el8.1.0+3366+6dfb954c
1.2.0-16.module+el8.1.0+3366+6dfb954c
redhat/fasterxml-oss-parent<69-3.module+el8.8.0+23396+b3893f62
69-3.module+el8.8.0+23396+b3893f62
redhat/glassfish-fastinfoset<1.2.13-9.module+el8.1.0+3366+6dfb954c
1.2.13-9.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb-api<2.2.12-8.module+el8.1.0+3366+6dfb954c
2.2.12-8.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb-core<2.2.11-11.module+el8.1.0+3366+6dfb954c
2.2.11-11.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb-runtime<2.2.11-11.module+el8.1.0+3366+6dfb954c
2.2.11-11.module+el8.1.0+3366+6dfb954c
redhat/glassfish-jaxb-txw2<2.2.11-11.module+el8.1.0+3366+6dfb954c
2.2.11-11.module+el8.1.0+3366+6dfb954c
redhat/jackson-annotations<2.19.1-3.module+el8.8.0+23396+b3893f62
2.19.1-3.module+el8.8.0+23396+b3893f62
redhat/jackson-bom<2.19.1-4.module+el8.8.0+23413+86800787
2.19.1-4.module+el8.8.0+23413+86800787
redhat/jackson-core<2.19.1-4.module+el8.8.0+23396+b3893f62
2.19.1-4.module+el8.8.0+23396+b3893f62
redhat/jackson-databind<2.19.1-1.module+el8.8.0+23396+b3893f62
2.19.1-1.module+el8.8.0+23396+b3893f62
redhat/jackson-jaxrs-json-provider<2.19.1-2.module+el8.8.0+23396+b3893f62
2.19.1-2.module+el8.8.0+23396+b3893f62
redhat/jackson-jaxrs-providers<2.19.1-2.module+el8.8.0+23396+b3893f62
2.19.1-2.module+el8.8.0+23396+b3893f62
redhat/jackson-module-jaxb-annotations<2.19.1-1.module+el8.8.0+23405+763e93bf
2.19.1-1.module+el8.8.0+23405+763e93bf
redhat/jackson-modules-base<2.19.1-1.module+el8.8.0+23405+763e93bf
2.19.1-1.module+el8.8.0+23405+763e93bf
redhat/jackson-parent<2.19.2-3.module+el8.8.0+23413+86800787
2.19.2-3.module+el8.8.0+23413+86800787
redhat/jakarta-commons-httpclient<3.1-28.module+el8.1.0+3366+6dfb954c
3.1-28.module+el8.1.0+3366+6dfb954c
redhat/javassist<3.18.1-8.module+el8.1.0+3366+6dfb954c
3.18.1-8.module+el8.1.0+3366+6dfb954c
redhat/javassist-javadoc<3.18.1-8.module+el8.1.0+3366+6dfb954c
3.18.1-8.module+el8.1.0+3366+6dfb954c
redhat/pki-servlet-engine<9.0.62-1.module+el8.8.0+22367+4894538d
9.0.62-1.module+el8.8.0+22367+4894538d
redhat/python-nss-debugsource<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python-nss-doc<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python3-nss<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python3-nss-debuginfo<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/resteasy<3.0.26-7.module+el8.8.0+22365+b433a336
3.0.26-7.module+el8.8.0+22365+b433a336
redhat/slf4j<1.7.25-4.module+el8.1.0+3366+6dfb954c
1.7.25-4.module+el8.1.0+3366+6dfb954c
redhat/slf4j-jdk14<1.7.25-4.module+el8.1.0+3366+6dfb954c
1.7.25-4.module+el8.1.0+3366+6dfb954c
redhat/stax-ex<1.7.7-8.module+el8.2.0+5723+4574fbff
1.7.7-8.module+el8.2.0+5723+4574fbff
redhat/velocity<1.7-24.module+el8.1.0+3366+6dfb954c
1.7-24.module+el8.1.0+3366+6dfb954c
redhat/xalan-j2<2.7.1-38.module+el8.1.0+3366+6dfb954c
2.7.1-38.module+el8.1.0+3366+6dfb954c
redhat/xerces-j2<2.11.0-34.module+el8.1.0+3366+6dfb954c
2.11.0-34.module+el8.1.0+3366+6dfb954c
redhat/xml-commons-apis<1.4.01-25.module+el8.1.0+3366+6dfb954c
1.4.01-25.module+el8.1.0+3366+6dfb954c
redhat/xml-commons-resolver<1.2-26.module+el8.1.0+3366+6dfb954c
1.2-26.module+el8.1.0+3366+6dfb954c
redhat/xmlstreambuffer<1.5.4-8.module+el8.2.0+5723+4574fbff
1.5.4-8.module+el8.2.0+5723+4574fbff
redhat/xsom<0-19.20110809svn.module+el8.1.0+3366+6dfb954c
0-19.20110809svn.module+el8.1.0+3366+6dfb954c
redhat/python-nss-debugsource<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python-nss-doc<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python3-nss<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
redhat/python3-nss-debuginfo<1.0.1-10.module+el8.1.0+3366+6dfb954c
1.0.1-10.module+el8.1.0+3366+6dfb954c
Remediation
Event History
Aug 20, 2025
Advisory Published
via Red Hat·12:05 AM
Data Sourced
via Red Hat·12:05 AM
DescriptionSeverityAffected Software
May 28, 2026
Advisory Published
via Red Hat·02:21 AM
Data Sourced
via Red Hat·02:21 AM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2025:14117?
The severity of RHSA-2025:14117 is classified as Important.
2
How do I fix RHSA-2025:14117?
To fix RHSA-2025:14117, you should update the affected packages to the recommended versions listed in the advisory.
3
What software does RHSA-2025:14117 affect?
RHSA-2025:14117 affects Red Hat Enterprise Linux products and associated security components.
4
What vulnerability is addressed in RHSA-2025:14117?
RHSA-2025:14117 addresses a potential StackOverflowError in the jackson-core package as identified by CVE-2025-52999.
5
When was RHSA-2025:14117 released?
RHSA-2025:14117 was released to address security vulnerabilities on specified dates outlined in Red Hat's advisory.