Summary
jackson-annotations
[2.19.1-1]
- Update to version 2.19.1
- Resolves: RHEL-100233
jackson-core
[2.19.1-1]
- Update to version 2.19.1
- Resolves: RHEL-103636
jackson-databind
[2.19.1-1]
- Update to version 2.19.1
- Resolves: RHEL-100233
jackson-jaxrs-providers
[2.19.1-1]
- Update to version 2.19.1
- Resolves: RHEL-100239
jackson-modules-base
[2.19.1-1]
- Update to version 2.19.1
- Resolves: RHEL-100245
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pki-jackson-annotations | 0:2.19.1-1.el9_6 |
| Oracle Linux · 9 | pki-jackson-core | 0:2.19.1-1.el9_6 |
| Oracle Linux · 9 | pki-jackson-databind | 0:2.19.1-1.el9_6 |
| Oracle Linux · 9 | pki-jackson-jaxrs-json-provider | 0:2.19.1-1.el9_6 |
| Oracle Linux · 9 | pki-jackson-jaxrs-providers | 0:2.19.1-1.el9_6 |
| Oracle Linux · 9 | pki-jackson-module-jaxb-annotations | 0:2.19.1-1.el9_6 |
Vulnerabilities 1
-
High 8.7CVE-2025-52999 Public exploit
jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…