{"id":"RLSA-2025:14126","summary":"Important: pki-deps:10.6 security update","details":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-03-11T06:32:30.314761Z","published":"2025-09-08T14:19:16.612452Z","upstream":["CVE-2025-52999"],"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2025:14126"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374804"}],"affected":[{"package":{"name":"apache-commons-collections","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-collections","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-collections","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-collections?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-lang","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-lang","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-lang?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-net","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-net","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"apache-commons-net","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/apache-commons-net?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"bea-stax","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"bea-stax","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/bea-stax?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-fastinfoset","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-fastinfoset","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-fastinfoset?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-jaxb","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-jaxb","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-jaxb?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-jaxb-api","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"glassfish-jaxb-api","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/glassfish-jaxb-api?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jackson-annotations","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jackson-annotations?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.19.1-1.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jackson-core","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jackson-core?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.19.1-1.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jackson-databind","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jackson-databind?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.19.1-1.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jakarta-commons-httpclient","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jakarta-commons-httpclient","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"jakarta-commons-httpclient","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/jakarta-commons-httpclient?distro=rocky-linux-8-x86-64&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"javassist","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"javassist","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"javassist","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/javassist?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"pki-servlet-engine","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.62-1.module+el8.10.0+1767+f923f786"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"pki-servlet-engine","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/pki-servlet-engine?distro=rocky-linux-8-x86-64&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.62-1.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"relaxngDatatype","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"relaxngDatatype","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/relaxngDatatype?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"slf4j","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"slf4j","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.6.0+843+5a13dac3"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"slf4j","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"slf4j","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+2003+8aeac9cb"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"slf4j","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/slf4j?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"stax-ex","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"stax-ex","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/stax-ex?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"velocity","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"velocity","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"velocity","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/velocity?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xalan-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xalan-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xalan-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xalan-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xerces-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xerces-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xerces-j2","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xerces-j2?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-apis","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-apis","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-apis","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-apis","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-apis?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.10.0+2003+8aeac9cb"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-resolver","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-resolver","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xml-commons-resolver","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xml-commons-resolver?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+74+855e3f5d"}],"database_specific":{"yum_repository":"PowerTools"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xmlstreambuffer","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xmlstreambuffer","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xmlstreambuffer?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xsom","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.10.0+1763+c7c02164"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}},{"package":{"name":"xsom","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/xsom?distro=rocky-linux-8-x86-64&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2025:14126.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}