CVE-2025-52999

apache-commons-lang: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...

CVE-2025-52999 is fixed in 42 products on 1 platform, first by DEBIAN-CVE-2025-52999, released June 25, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0077
55th percentile

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
apache-commons-collections · RHEL 8 0:3.2.2-10.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
apache-commons-collections · almalinux 8 3.2.2-10.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
apache-commons-collections · ol 8 0:3.2.2-10.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
apache-commons-collections · rocky 8 0:3.2.2-10.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
apache-commons-lang · RHEL 8 0:2.6-21.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
apache-commons-lang · almalinux 8 2.6-21.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
apache-commons-lang · ol 8 0:2.6-21.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
apache-commons-lang · rocky 8 0:2.6-21.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
apache-commons-net · RHEL 8 0:3.6-3.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
apache-commons-net · almalinux 8 3.6-3.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
apache-commons-net · ol 8 0:3.6-3.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
apache-commons-net · rocky 8 0:3.6-3.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
bea-stax · rocky 8 0:1.2.0-16.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
bea-stax-api · RHEL 8 0:1.2.0-16.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
bea-stax-api · almalinux 8 1.2.0-16.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
bea-stax-api · ol 8 0:1.2.0-16.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
fasterxml-oss-parent · RHEL 8 0:69-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
fasterxml-oss-parent · almalinux 8 69-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
fasterxml-oss-parent · ol 8 0:69-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
glassfish-fastinfoset · RHEL 8 0:1.2.13-9.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
glassfish-fastinfoset · almalinux 8 1.2.13-9.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
glassfish-fastinfoset · ol 8 0:1.2.13-9.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
glassfish-fastinfoset · rocky 8 0:1.2.13-9.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
glassfish-jaxb · rocky 8 0:2.2.11-12.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
glassfish-jaxb-api · RHEL 8 0:2.2.12-8.module+el8.10.0+21035+a01f6469 RHSA-2025:14126 Aug 20, 2025
glassfish-jaxb-api · almalinux 8 2.2.12-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
glassfish-jaxb-api · ol 8 0:2.2.12-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
glassfish-jaxb-api · rocky 8 0:2.2.12-8.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
glassfish-jaxb-core · RHEL 8 0:2.2.11-12.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
glassfish-jaxb-core · almalinux 8 2.2.11-12.module_el8.10.0+3791+e0637953 ALSA-2025:14126 Aug 20, 2025
glassfish-jaxb-core · ol 8 0:2.2.11-12.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
glassfish-jaxb-runtime · RHEL 8 0:2.2.11-12.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
glassfish-jaxb-runtime · almalinux 8 2.2.11-12.module_el8.10.0+3791+e0637953 ALSA-2025:14126 Aug 20, 2025
glassfish-jaxb-runtime · ol 8 0:2.2.11-12.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
glassfish-jaxb-txw2 · RHEL 8 0:2.2.11-12.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
glassfish-jaxb-txw2 · almalinux 8 2.2.11-12.module_el8.10.0+3791+e0637953 ALSA-2025:14126 Aug 20, 2025
glassfish-jaxb-txw2 · ol 8 0:2.2.11-12.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-annotations · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-annotations · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-annotations · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-annotations · rocky 8 0:2.19.1-1.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
jackson-annotations · rocky 9 0:2.19.1-1.el9_6 RLSA-2025:12280 Oct 18, 2025
jackson-bom · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-bom · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-bom · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-core · Debian 12.15 (bookworm) 2.14.1-2~deb12u1 DEBIAN-CVE-2025-52999 Jun 25, 2025
jackson-core · Debian 13.5 (trixie) 2.14.1-2~deb13u1 DEBIAN-CVE-2025-52999 Jun 25, 2025
jackson-core · Debian 14 2.14.1-2 DEBIAN-CVE-2025-52999 Jun 25, 2025
jackson-core · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-core · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-core · amzn 2023 2.16.1-4.amzn2023.0.1 ALAS2023-2025-1127 Jul 29, 2025
jackson-core · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-core · rocky 8 0:2.19.1-1.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
jackson-core · rocky 9 0:2.19.1-1.el9_6 RLSA-2025:12280 Oct 18, 2025
jackson-databind · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-databind · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-databind · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-databind · rocky 8 0:2.19.1-1.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
jackson-databind · rocky 9 0:2.19.1-1.el9_6 RLSA-2025:12280 Oct 18, 2025
jackson-jaxrs-json-provider · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-jaxrs-json-provider · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-jaxrs-json-provider · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-jaxrs-providers · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-jaxrs-providers · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-jaxrs-providers · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-jaxrs-providers · rocky 9 0:2.19.1-1.el9_6 RLSA-2025:12280 Oct 18, 2025
jackson-module-jaxb-annotations · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-module-jaxb-annotations · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-module-jaxb-annotations · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-modules-base · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-modules-base · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-modules-base · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jackson-modules-base · rocky 9 0:2.19.1-1.el9_6 RLSA-2025:12280 Oct 18, 2025
jackson-parent · RHEL 8 0:2.19.1-1.module+el8.10.0+23380+f6e7434b RHSA-2025:14126 Aug 20, 2025
jackson-parent · almalinux 8 2.19.1-1.module_el8.10.0+4034+20822525 ALSA-2025:14126 Aug 20, 2025
jackson-parent · ol 8 0:2.19.1-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jakarta-commons-httpclient · RHEL 8 1:3.1-28.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
jakarta-commons-httpclient · almalinux 8 1:3.1-28.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
jakarta-commons-httpclient · ol 8 1:3.1-28.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
jakarta-commons-httpclient · rocky 8 1:3.1-28.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
javassist · RHEL 8 0:3.18.1-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
javassist · almalinux 8 3.18.1-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
javassist · ol 8 0:3.18.1-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
javassist · rocky 8 0:3.18.1-8.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
javassist-javadoc · RHEL 8 0:3.18.1-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
javassist-javadoc · almalinux 8 3.18.1-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
javassist-javadoc · ol 8 0:3.18.1-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
pki-jackson-annotations · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-annotations · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-annotations · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-jackson-core · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-core · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-core · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-jackson-databind · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-databind · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-databind · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-jackson-jaxrs-json-provider · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-jaxrs-json-provider · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-jaxrs-json-provider · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-jackson-jaxrs-providers · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-jaxrs-providers · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-jaxrs-providers · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-jackson-module-jaxb-annotations · RHEL 9 0:2.19.1-1.el9_6 RHSA-2025:12280 Jul 30, 2025
pki-jackson-module-jaxb-annotations · almalinux 9 2.19.1-1.el9_6 ALSA-2025:12280 Jul 30, 2025
pki-jackson-module-jaxb-annotations · ol 9 0:2.19.1-1.el9_6 ELSA-2025-12280 Jul 30, 2025
pki-servlet-engine · RHEL 8 1:9.0.62-1.module+el8.10.0+21257+2b5308b5 RHSA-2025:14126 Aug 20, 2025
pki-servlet-engine · almalinux 8 1:9.0.62-1.module_el8.10.0+3791+e0637953 ALSA-2025:14126 Aug 20, 2025
pki-servlet-engine · ol 8 1:9.0.62-1.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
pki-servlet-engine · rocky 8 1:9.0.62-1.module+el8.10.0+1767+f923f786 RLSA-2025:14126 Sep 8, 2025
relaxngDatatype · RHEL 8 0:2011.1-7.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
relaxngDatatype · almalinux 8 2011.1-7.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
relaxngDatatype · ol 8 0:2011.1-7.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
relaxngDatatype · rocky 8 0:2011.1-7.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
slf4j · RHEL 8 0:1.7.25-4.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
slf4j · almalinux 8 1.7.25-4.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
slf4j · ol 8 0:1.7.25-4.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
slf4j · rocky 8 0:1.7.25-4.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
slf4j-jdk14 · RHEL 8 0:1.7.25-4.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
slf4j-jdk14 · almalinux 8 1.7.25-4.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
slf4j-jdk14 · ol 8 0:1.7.25-4.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
stax-ex · RHEL 8 0:1.7.7-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
stax-ex · almalinux 8 1.7.7-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
stax-ex · ol 8 0:1.7.7-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
stax-ex · rocky 8 0:1.7.7-8.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
velocity · RHEL 8 0:1.7-24.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
velocity · almalinux 8 1.7-24.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
velocity · ol 8 0:1.7-24.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
velocity · rocky 8 0:1.7-24.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
xalan-j2 · RHEL 8 0:2.7.1-38.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xalan-j2 · almalinux 8 2.7.1-38.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xalan-j2 · ol 8 0:2.7.1-38.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xalan-j2 · rocky 8 0:2.7.1-38.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
xerces-j2 · RHEL 8 0:2.11.0-34.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xerces-j2 · almalinux 8 2.11.0-34.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xerces-j2 · ol 8 0:2.11.0-34.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xerces-j2 · rocky 8 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
xml-commons-apis · RHEL 8 0:1.4.01-25.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xml-commons-apis · almalinux 8 1.4.01-25.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xml-commons-apis · ol 8 0:1.4.01-25.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xml-commons-apis · rocky 8 0:1.4.01-25.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
xml-commons-resolver · RHEL 8 0:1.2-26.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xml-commons-resolver · almalinux 8 1.2-26.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xml-commons-resolver · ol 8 0:1.2-26.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xml-commons-resolver · rocky 8 0:1.2-26.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025
xmlstreambuffer · RHEL 8 0:1.5.4-8.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xmlstreambuffer · almalinux 8 1.5.4-8.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xmlstreambuffer · ol 8 0:1.5.4-8.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xmlstreambuffer · rocky 8 0:1.5.4-8.module+el8.10.0+2052+1b0fb438 RLSA-2025:14126 Sep 8, 2025
xsom · RHEL 8 0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0 RHSA-2025:14126 Aug 20, 2025
xsom · almalinux 8 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 ALSA-2025:14126 Aug 20, 2025
xsom · ol 8 0:0-19.20110809svn.module+el8.10.0+90642+1ede0e5a ELSA-2025-14126 Aug 22, 2025
xsom · rocky 8 0:0-19.20110809svn.module+el8.10.0+1763+c7c02164 RLSA-2025:14126 Sep 8, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.