Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update
Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This update to Red Hat Single Sign-On 7.6.12 includes a security update with important impact. Security fixes: * jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)
AI Analysis
Technical Summary
CVE-2025-52999 affects Red Hat OpenShift Logging 5.8.22 and related versions, involving a potential stack overflow error in the jackson-core component. This vulnerability is classified under CWE-121 (Stack-based Buffer Overflow). Red Hat has issued an important security advisory (RHSA-2025:17189) confirming the availability of a patch for this issue. The vulnerability impacts versions including 5.8.0 through 5.8.22 and certain 7.x versions as explicitly stated. No active exploitation has been observed. The vendor advisory provides upgrade instructions to remediate the vulnerability.
Potential Impact
The vulnerability could lead to a stack overflow condition within the jackson-core library used by Red Hat OpenShift Logging, potentially causing application crashes or denial of service. The advisory does not specify further impact such as remote code execution or data compromise. No known exploits are currently active in the wild.
Mitigation Recommendations
An official patch is available from Red Hat to address this vulnerability. Users should follow the vendor's upgrade instructions for Red Hat OpenShift Logging 5.8 as documented at https://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html and ensure all prior relevant errata are applied. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update
Description
Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This update to Red Hat Single Sign-On 7.6.12 includes a security update with important impact. Security fixes: * jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)
Affected software
pkg:maven/org.jboss.eap/jboss-enterprise-application-platformRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-52999 affects Red Hat OpenShift Logging 5.8.22 and related versions, involving a potential stack overflow error in the jackson-core component. This vulnerability is classified under CWE-121 (Stack-based Buffer Overflow). Red Hat has issued an important security advisory (RHSA-2025:17189) confirming the availability of a patch for this issue. The vulnerability impacts versions including 5.8.0 through 5.8.22 and certain 7.x versions as explicitly stated. No active exploitation has been observed. The vendor advisory provides upgrade instructions to remediate the vulnerability.
Potential Impact
The vulnerability could lead to a stack overflow condition within the jackson-core library used by Red Hat OpenShift Logging, potentially causing application crashes or denial of service. The advisory does not specify further impact such as remote code execution or data compromise. No known exploits are currently active in the wild.
Mitigation Recommendations
An official patch is available from Red Hat to address this vulnerability. Users should follow the vendor's upgrade instructions for Red Hat OpenShift Logging 5.8 as documented at https://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html and ensure all prior relevant errata are applied. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:0742
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-55163"]
- State
- PUBLISHED
Threat ID: 6a294d718dd33fbd853ab55e
Added to database: 06/10/2026, 11:41:37 UTC
Last enriched: 08/10/2026, 20:45:01 UTC
Last updated: 09/10/2026, 22:05:25 UTC
Views: 95
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.