Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2026:83557 - Bug Fix Advisory
Issued:
2026-10-15
Updated:
2026-10-15

RHBA-2026:83557 - Bug Fix Advisory

  • Overview
  • Updated Images

Synopsis

updated Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 container images

Type/Severity

Bug Fix Advisory

Topic

Updated Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 container images are now available

Description

The Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 container images have been updated to address the following security advisory: RHSA-2026:81613 (see References)

Users of Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog (see References).

Solution

The Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

  • JBoss Enterprise Application Platform 7.4 ELS 7.4 for RHEL 8 x86_64

Fixes

  • BZ - 2528993 - CVE-2026-86145 pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions
  • BZ - 2531744 - CVE-2026-89157 pcre2: PCRE2: Out-of-bounds write via large pattern input
  • BZ - 2531746 - CVE-2026-89158 PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms
  • BZ - 2543797 - CVE-2026-103111 pcre2: pcre2: Out-of-bounds write via crafted regular expression

CVEs

  • CVE-2026-18374
  • CVE-2026-19542
  • CVE-2026-73073
  • CVE-2026-77117
  • CVE-2026-77219
  • CVE-2026-79992
  • CVE-2026-80489
  • CVE-2026-86142
  • CVE-2026-86145
  • CVE-2026-89157
  • CVE-2026-89158
  • CVE-2026-103111

References

  • https://access.redhat.com/errata/RHSA-2026:81613
  • https://access.redhat.com/containers

aarch64

jboss-eap-7/eap74-els-openjdk17-openshift-rhel8@sha256:13f4ba8d00b42f1871e51ceeaf7cc26fc0d3c320a7a26fa0078647e29fcf9453
jboss-eap-7/eap74-els-openjdk17-runtime-openshift-rhel8@sha256:5966c69f219b28b91a97fc4f80a8b93170957a50e18c94ac8842739a2295b125

ppc64le

jboss-eap-7/eap74-els-openjdk11-openshift-rhel8@sha256:5cf1bc17d0f550317a18ceab4b6cb01ef60293d8cfe7ac4a0716055ddc41ed99
jboss-eap-7/eap74-els-openjdk11-runtime-openshift-rhel8@sha256:65953a2e928796a44edf0d554e7513cbde41a0f344cc2432a333282cd0b23169
jboss-eap-7/eap74-els-openjdk17-openshift-rhel8@sha256:4adb3f78c4e42ac57c87caf56d332c294ab00c8e7b4034489ee6e1c25f2321d0
jboss-eap-7/eap74-els-openjdk17-runtime-openshift-rhel8@sha256:a7171d4a65e3b015e77b713d1afc3a9c4d53e6e9966cd3c59ff7d7f6adef2588

s390x

jboss-eap-7/eap74-els-openjdk11-openshift-rhel8@sha256:c1f0296ea08473e789a05144c75e8422b9564b7eac7b72d215c729d36da0324c
jboss-eap-7/eap74-els-openjdk11-runtime-openshift-rhel8@sha256:68bf01c43f456cb412efa1f020f23fd4d1ebffaf87a99635252539cb73f59d60
jboss-eap-7/eap74-els-openjdk17-openshift-rhel8@sha256:389ca7d9b1ec7ba425985cf2def762096ffb70df97c3b3eec6919dd875bc0498
jboss-eap-7/eap74-els-openjdk17-runtime-openshift-rhel8@sha256:55ef767175ed11824366a0fa0fdcfda25a1cebb60765defcaab185d8fdd5911c

x86_64

jboss-eap-7/eap74-els-openjdk11-openshift-rhel8@sha256:16cd19cf14a20e1feaae53138b6db7d8db6c67fe299c3f2537c95e2e49987ad7
jboss-eap-7/eap74-els-openjdk11-runtime-openshift-rhel8@sha256:3e408d819537c18bd751597775587a6b2c7dcb96f2bb54c5c6e4d39577ce532a
jboss-eap-7/eap74-els-openjdk17-openshift-rhel8@sha256:4d329b69f933ecb8e9b4b0689df16a685dd0b53794672161475d2a8db6677616
jboss-eap-7/eap74-els-openjdk17-runtime-openshift-rhel8@sha256:8d5c09c2f6f3f3859f20cbe3c620c261bc6651b50197fef5d8863140f6fc6d64
jboss-eap-7/eap74-els-openjdk8-openshift-rhel8@sha256:a8e612d9edfe79e632f8d93b02a3190adccdb953fa2c522ecbb594f000e8ab29
jboss-eap-7/eap74-els-openjdk8-runtime-openshift-rhel8@sha256:5ab8a81ed6a65e4df08422f54689954681872121b2d9cd4678403a16a9e0cce4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility