Description:
This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile (binary JSON), XML, CBOR (another kind of binary JSON), YAML.
Security Fix(es):
* com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing (CVE-2026-68497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| noarch |
pki-jackson-core-2.21.6-1.el9_8.noarch.rpm |
0217997f30742dafab4cc9c9e5d9ccfd48fca7eeaff8ee46ea404317fd1accfe |
| noarch |
pki-jackson-databind-2.21.6-1.el9_8.noarch.rpm |
12910c21a46832d57a8bc9013fac02135dabb3b68ce4f12c072eef052f7ee9f3 |
| noarch |
pki-jackson-module-jaxb-annotations-2.21.6-1.el9_8.noarch.rpm |
798acc97fec7c4f2b45252292a3928650e36b77a2048d7e0bab35c639f9f0486 |
| noarch |
pki-jackson-jaxrs-json-provider-2.21.6-1.el9_8.noarch.rpm |
a27ab0aa9f686d0561d760b8ea6c9b1b098d622a37ecbec01b8a2047f6a3b3ce |
| noarch |
pki-jackson-jaxrs-providers-2.21.6-1.el9_8.noarch.rpm |
db3eb9026e2269776b40cb822cfe3e059f30a2ccce4df1d1cf0d2bf8889703a3 |