Red Hat Product Errata RHSA-2020:3637 - Security Advisory
Issued:
2020-09-07
Updated:
2020-09-07

RHSA-2020:3637 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 6 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

This release of Red Hat JBoss Enterprise Application Platform 7.2.9 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.8, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.9 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • jackson-databind: Serialization gadgets in ibatis-sqlmap (CVE-2020-9547)
  • jackson-databind: Lacks certain xbean-reflect/JNDI blocking (CVE-2020-8840)
  • jackson-databind: Serialization gadgets in anteros-core (CVE-2020-9548)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10672)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10673)
  • jackson-databind: Serialization gadgets in shaded-hikari-config (CVE-2020-9546)
  • undertow: EAP: field-name is not parsed in accordance to RFC7230 (CVE-2020-1710)
  • wildfly-undertow: Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests (CVE-2020-10687)
  • jsf-impl: Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 (CVE-2020-6950)
  • resteasy-jaxrs: resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class (CVE-2020-1695)
  • wildfly-elytron: session fixation when using FORM authentication (CVE-2020-10714)
  • dom4j: XML External Entity vulnerability in default SAX parser (CVE-2020-10683)
  • wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain (CVE-2020-1748)
  • hibernate-validator: Improper input validation in the interpolation of constraint error messages (CVE-2020-10693)
  • hibernate-core: hibernate: SQL injection issue in Hibernate ORM (CVE-2019-14900)
  • wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API (CVE-2020-10718)

• wildfly: unsafe deserialization in Wildfly Enterprise Java Beans (CVE-2020-10740)

  • jboss-ejb-client: wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service (CVE-2020-14307)
  • jboss-ejb-client: wildfly: Some EJB transaction objects may get accumulated causing Denial of Service (CVE-2020-14297)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

Solution

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

For details about how to apply this update, which includes the changes described in this advisory, see:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.2 for RHEL 6 x86_64

Fixes

  • BZ - 1666499 - CVE-2019-14900 hibernate: SQL injection issue in Hibernate ORM
  • BZ - 1694235 - CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser
  • BZ - 1730462 - CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
  • BZ - 1785049 - CVE-2020-10687 Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests
  • BZ - 1793970 - CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230
  • BZ - 1805006 - CVE-2020-6950 Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371
  • BZ - 1805501 - CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages
  • BZ - 1807707 - CVE-2020-1748 Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain
  • BZ - 1815470 - CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1815495 - CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1816330 - CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking
  • BZ - 1816332 - CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config
  • BZ - 1816337 - CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap
  • BZ - 1816340 - CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core
  • BZ - 1825714 - CVE-2020-10714 wildfly-elytron: session fixation when using FORM authentication
  • BZ - 1828476 - CVE-2020-10718 wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API
  • BZ - 1834512 - CVE-2020-10740 wildfly: unsafe deserialization in Wildfly Enterprise Java Beans
  • BZ - 1851327 - CVE-2020-14307 wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service
  • BZ - 1853595 - CVE-2020-14297 wildfly: Some EJB transaction objects may get accumulated causing Denial of Service

JBoss Enterprise Application Platform 7.2 for RHEL 6

SRPM
eap7-dom4j-2.1.3-1.redhat_00001.1.el6eap.src.rpm SHA-256: fe24af4a263b7c19546b793cad74e4767e2877cf80e849be5770060bbf7391a5
eap7-elytron-web-1.2.5-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 99fcea47be1162fc4c7174eb22aeaac69e0cd261b646e1b13ad170aadae27c72
eap7-glassfish-jsf-2.3.5-13.SP3_redhat_00011.1.el6eap.src.rpm SHA-256: 583369874c1123761500c70ed0ed212598c240fe6b15bb4b763a49c62507f58d
eap7-hal-console-3.0.23-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 70afff96d77efd319706850a6bfc9e27f9bacab08dfb24e4be09a9d5286dcf4b
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 118745b68f1e5de406b54fbfa5734b76a78b6e70006c8a1473ccd3433a30826a
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 213811db416d526c882a24ca43b1c4bd38dc8bde01d66c030773f8b3517ab153
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 36d594a0efd2393ce7a22092fa46a18f5380fe1f3822d9e64d5f2611db5299ce
eap7-jackson-databind-2.9.10.4-1.redhat_00001.1.el6eap.src.rpm SHA-256: b159540efa4341f1bd3ef6eb2ece5ae340b94de61381ad592455ac426bcade0c
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 78449b955ff0c646a4c40baa4de40e75fd3465ae5d47090a2641199b5a831de0
eap7-jboss-jsf-api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el6eap.src.rpm SHA-256: 341979bccfe9789b9c53fe157f36aeb911e56917bb8c66f2dd7cb87eb40d5a68
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 8ab8579f829a0585a817091ad915004530e3ac0d05089a19902ef21e4db6c493
eap7-jboss-modules-1.8.10-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 897536da64125f889e6e7d5e1d6a266c049c5901c0cd18d66e8468d994fea4f6
eap7-jboss-server-migration-1.3.1-13.Final_redhat_00014.1.el6eap.src.rpm SHA-256: 4acbc3260be8af85a21189879234016b8f6abed324fe2917dbf02dbcd55270c0
eap7-jboss-xnio-base-3.7.6-4.SP3_redhat_00001.1.el6eap.src.rpm SHA-256: a1427854bb5ebe13a69759426c7bcbf06d54b4c79e3ffea95249cb4425ee6f32
eap7-resteasy-3.6.1-10.SP9_redhat_00001.1.el6eap.src.rpm SHA-256: f2241ef5948d599f3b322acd29fa18b9bb708da9b6b100cea70b2ea9bd8899ee
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el6eap.src.rpm SHA-256: b152f978338a8e4d18093e9f15d57892ffe065e17b74da328320501953e1d7e1
eap7-weld-core-3.0.6-4.Final_redhat_00004.1.el6eap.src.rpm SHA-256: 499a3084e51269bef54914fd9abe422504a059ec2617aaa04636b4991c0f8c83
eap7-wildfly-7.2.9-4.GA_redhat_00003.1.el6eap.src.rpm SHA-256: 1dd4b51478c9593658c34de87ffe084b772906be23f28c8c08cb667a61b982b0
eap7-wildfly-elytron-1.6.8-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 4afc34c5776160418bb117ac20969e2956afb0ea8d4e6f1eae70835144442b02
eap7-wildfly-http-client-1.0.22-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 69a7c9d587b3ccf83fa7794bdf86d93f730541e8c389e29b5fca6d924d1a0e1b
eap7-wildfly-transaction-client-1.1.11-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: f3b695efa99229aa5e5bd53de4613431523ffddc748df20c7b0bb5d17e66fcc0
x86_64
eap7-dom4j-2.1.3-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: c6aa9133eef35d9c062c257a1bad4dc7cd61ca1939566cadc5abc02da1d26950
eap7-glassfish-jsf-2.3.5-13.SP3_redhat_00011.1.el6eap.noarch.rpm SHA-256: a14edb825e3a3b4b6e5bd2a775d78438abd73258fa3e71fa4853114f860f6ff7
eap7-hal-console-3.0.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 83160afdde053e1e94bde0a518575253c9ae26609abed0fa7018a1a4ef2900d2
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 24a72541ba3f582ff25ed7f7fb83c9f50d53a6a2bd2b34420bae06a77e55a343
eap7-hibernate-core-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 1f084618a16694615121786fb578d7cb6c011a0b9bb4bf5279f9704924e086a0
eap7-hibernate-entitymanager-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: fc62d30801b4c911d07545598ad5c31fcdaf60926f74a3859544147ace49a682
eap7-hibernate-envers-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: d79b3d59921c34cfe4bd9e15c07c917194d81dc7d11104849af64239feaf4e3a
eap7-hibernate-java8-5.3.17-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 273abfc3a738ab775fe075fc25713eda3aa6cbbe7bf5ee44bd5a400c854a7aeb
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: e124a69a8da88f35e6c2f49b236047c5ddd66ad48a6fa0c47995ddbfafd10d25
eap7-hibernate-validator-cdi-6.0.20-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5044202964361fec798c0b75fec4fbc67abd0a24e62e69609ae049a1ded29c7f
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 557de3ea80a87d1328914d4cef4fe236379528ac697e41fe87a06d8e1e09362f
eap7-ironjacamar-common-api-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2b3744d59d8e81420686e6eca5768e43f8a6ca3a1d37a1bd3e7027a064d46217
eap7-ironjacamar-common-impl-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a30e3faa71638245563e7d1b5cfcd05ff1f3621b723b47007e50ea180043794c
eap7-ironjacamar-common-spi-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 53935099ff081106f87cbba6a0a2ef5c04c0c43260f74a16077b5817ae8f591a
eap7-ironjacamar-core-api-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: cb57ae6b7b68887471d68e9866a082e80f1a55576bf43da935b2cf1fe02f15ea
eap7-ironjacamar-core-impl-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 116da25f67731ec81b721fb623d28864e81a50431edd809302504138e36e62c9
eap7-ironjacamar-deployers-common-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 0bf53f5c295e1605b07b21f3671979d571734d35b24f638f32aff423554762b5
eap7-ironjacamar-jdbc-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a2f5c7e149819f74876ab9d503b9a2db03f4feeff87cae5644b32ece10218258
eap7-ironjacamar-validator-1.4.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a52811f7072a87b1d3454ee43b4477f49a1843bdfed1f97a7b2d3dc9c377f156
eap7-jackson-databind-2.9.10.4-1.redhat_00001.1.el6eap.noarch.rpm SHA-256: 203da9614c0f497110b7daf8a8ea69dc66b74eb4bd2f374912b392e9fe1e1aec
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: e066108276d642633479bdbd480b254306348248f76d1ecce834d94a6e5ead81
eap7-jboss-jsf-api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el6eap.noarch.rpm SHA-256: 20478adff15fd9835d8d592eeb6bff82b1f983344126286d6f4a77b6720def69
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a41e74838b49497f21a6c000c1c9a0a3c7dc1f8a614504f98e013573ef88e5c0
eap7-jboss-modules-1.8.10-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 8118db63f776e546668f99d88127666987bd531318fdb47d259b1b908c16d45b
eap7-jboss-server-migration-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: fe7fd6a76ba140fe07a204d2eb6c8607980f158fffa1742698063c0bfc737f0c
eap7-jboss-server-migration-cli-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 1a3118343d83131ee7b13018dc358ec3778ef031a06ac9ce5eafede14a2d8578
eap7-jboss-server-migration-core-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: adf2fe58a3c21e09a1dcfc4a6a254387ba8359b71e9d689eff4ca1c6b08a5352
eap7-jboss-server-migration-eap6.4-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 24d2fa19daef8b5c0973f54c546373aacc5548d544dbaf2cc9e8b81c2cea6f6f
eap7-jboss-server-migration-eap6.4-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: b795b2a68ec908e2428e55fc2c8af838e4ae5d86c59da85dc9da9676fef65344
eap7-jboss-server-migration-eap7.0-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 82d535ac9957ba0b2437296f53f9dead6866a2147687447ac1bc41c2be7812ba
eap7-jboss-server-migration-eap7.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 0e953d24cc47179be5a2a0302c2ac7559eab63794461e2776538b0f548fa0f8e
eap7-jboss-server-migration-eap7.1-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 400b5c41a7e38282ce2d3c3aac4289f5570b777fd84317dd93a2c3eb88105705
eap7-jboss-server-migration-eap7.1-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 83a3beeadf42ae444df62d85adea22a45acbf729a77016e90f43e44624fae510
eap7-jboss-server-migration-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 650761e07d99cf673c5ec4176bb30884f73f2f442a8d4dc38f37c1a1e8703407
eap7-jboss-server-migration-wildfly10.0-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: db2a2d405c73e62a8141d35e48ae017bcfd8f92f9f09245a8cd4a2e602105b77
eap7-jboss-server-migration-wildfly10.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 7b5da9149bd7e0bf26ed785dbf80a90c8d3f6211a819a027a5ecbe5640c56583
eap7-jboss-server-migration-wildfly10.1-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: d8e3f465e2036b9d71c68fac235a77a5010491d7f923ac1dccce971a6885c833
eap7-jboss-server-migration-wildfly10.1-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 505b1917ce14e640d1f2b88792a6353667d83c496ba8f28789ce1d040b2d11c2
eap7-jboss-server-migration-wildfly11.0-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 986c45b5d30b392f8c8ceb1423d110a490f4836aeb44dfcdf756687fcbff9116
eap7-jboss-server-migration-wildfly11.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: d109c9128a0579fb41140968af17e98624f915bb0e0f20961dee168ddcd26f5e
eap7-jboss-server-migration-wildfly12.0-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 6e0bc4a4f21f59fdb5a57970bfbacb2ac4cf4f5dcd0ff3ec0db8c61eb3881169
eap7-jboss-server-migration-wildfly12.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 10ca14304875ef0445ecf4ab7d22b38f375e3e18dbfc8a11153b76ad70322b7f
eap7-jboss-server-migration-wildfly13.0-server-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: b15fd7803adf9df93cf6077be432ee9e9d2b0e3dc71f7f055003bb177cb655ca
eap7-jboss-server-migration-wildfly14.0-server-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 9172a0bafa8cc4fe7c88d113d3b0960088009bcfef11a54e5037a0608bb1bf3e
eap7-jboss-server-migration-wildfly8.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: b7d24a9ef43ce7e408bdf9aa98b875c216cb38b3c1aa137d9a22adddf1034a5f
eap7-jboss-server-migration-wildfly8.2-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 14cff3d5da9f4670d9ed7611cd78fb7bbe7b51fde26056f7e07b8a03a7121ed3
eap7-jboss-server-migration-wildfly9.0-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: a046800dbdcda4cb1b0754081ebc4b49b2dd75cd9421d4c361c32ecd92dfd5ec
eap7-jboss-server-migration-wildfly9.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el6eap.noarch.rpm SHA-256: 4ea4ff0994ab48072464bba78a749b88ae9c2625d31cfd8e88c2858a96477bd3
eap7-jboss-xnio-base-3.7.6-4.SP3_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2fb697a96eb7ae0141e4476402ddc57523e15ac2fdc69d6ee1b210240f84d82a
eap7-resteasy-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: d569a4fa38a16848b5b920ee6a70b637f5989e705df59fcea0f74419f05fa51c
eap7-resteasy-atom-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 54782d01b5f0fa78d2afec12c0edea4b56e60b0670168858903c6c6db0165da2
eap7-resteasy-cdi-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 84031141ef8b3d9e4c71cd199ada527ca05baad3ad45f8f2dbdf7b73a76a50ca
eap7-resteasy-client-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2046483ce54fcac129c7df808886ab6fe8d5c1128379d92bd9d92857f302fd67
eap7-resteasy-client-microprofile-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: a6744295ca01e81bd4c987f61f3a1c20ea891568fb82d3aa3b8823158a178d88
eap7-resteasy-crypto-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 0dbe1464cd7464da33c22d6865dd274108569ab4428ce22baff3336ddb29274e
eap7-resteasy-jackson-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 8f7e3079297a6f5273867dc2b77449e088360255737f38d285fb571a5408ee9e
eap7-resteasy-jackson2-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 58ede6a6f8d875367b6515e1684c41794706bc15da38276fe80ec21cfefd0fea
eap7-resteasy-jaxb-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: b89e961551d4f49cd31d99b6d3aa4cf0ac018977ed7caede76aa24102572d7a0
eap7-resteasy-jaxrs-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 94d9d3dd728534095b2368f308d54581dabbf74a4d5f65bf3a00c428ef952b3f
eap7-resteasy-jettison-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 85d171c8bc6b80ce2eca30bdfc0f20e3ebadb873f54e2d76d7450edf56662458
eap7-resteasy-jose-jwt-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 556b2152143048a4523d7e080544e27cbfe6db190094e6b247b657f2b936d07a
eap7-resteasy-jsapi-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 33a0fbc8f33da750167ebdeb963b5c40ac1510ece305f11fde7dbfb81023e656
eap7-resteasy-json-binding-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2ef83eece2f1b88a7fa4562a4a3bff74af7283d39a0757fba7f6732d613b16ea
eap7-resteasy-json-p-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2d5a9c253c7e771724404d771033f655c361bb9b6e8de2699ef53b7a6976a691
eap7-resteasy-multipart-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: ca6c2ecc46905579e9d19d777b5bd33122b577c531f0a7605833a86a102db7b5
eap7-resteasy-rxjava2-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 6eea6843ad7b650a230ecdc8a63578724e43f3db77ea750f13b9a121d91e4bad
eap7-resteasy-spring-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: fdadb626f017d3e2e0cc19f855a616d870ba82ea59911b6824f9e30353d02653
eap7-resteasy-validator-provider-11-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: f919b208fbca575c7ef9f102ae8b09957a8f47b5d1968da1791488272f45c7df
eap7-resteasy-yaml-provider-3.6.1-10.SP9_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5093a17a6a9ab02f3543a1eddcae6433d62d5f5148e263d43268532b36293273
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el6eap.noarch.rpm SHA-256: c68830efe635bcc2e23059b896b2125d5271eaac26aea22925b2621f5729c6cb
eap7-undertow-server-1.2.5-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 39ea14854f06ed0baf176ab3089959186e108f9c99beb143093b30cbf292fb1c
eap7-weld-core-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: d9ba95f4a895c9d950d823c954bc160c038d33824212d10591a13873ae63a304
eap7-weld-core-impl-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: 65d0900088434b3cbbb8c6966071a0fbdba57595c5e6919448ca32ed0f624427
eap7-weld-core-jsf-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: 8a6d2db4c11873d824f335b8f94a686aa655fcab5e114e4780ef0641ff2a7b71
eap7-weld-ejb-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: 4619744d9b37f5f2ec7ca3fa52e2431ca90b01f95f61873495e47e72b523984e
eap7-weld-jta-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: 964ae4d7b674be0f043d85457133b589fe07961134569d91f4af0e23a2d77f60
eap7-weld-probe-core-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: 65d7a675240850a3cd8306f1a8dd35d80d9d5b3f09058701ad6724f5bf91bff0
eap7-weld-web-3.0.6-4.Final_redhat_00004.1.el6eap.noarch.rpm SHA-256: aa5be8e6b5c226c791f0c82811b45704d9cae07a9c2d35c6eee58401a34313f4
eap7-wildfly-7.2.9-4.GA_redhat_00003.1.el6eap.noarch.rpm SHA-256: b5f7cc2524a2b48f50264d14ff2f1ad818f5a59aac8fe002f4edb387d8cb8864
eap7-wildfly-elytron-1.6.8-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 40506cb6d611a98fbf71633a2ab5abea188995728ab4c2308925ba43a7f94bde
eap7-wildfly-http-client-common-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 64af9d712c1b8a2dfe56c730b7fb52d6e70cc4e8a60e13ba02c577769be33a6c
eap7-wildfly-http-ejb-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 1106629a536394048f3b8455cfa20560cb4f35b33521fbbb6997e6e2809dde61
eap7-wildfly-http-naming-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: a8b32a998d9d3a52a2f4b3fb88fff4e270c10e1719e4f00f8491ef23594ff955
eap7-wildfly-http-transaction-client-1.0.22-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 7277f94b07e3ac2d86c14c231497a5ccb0a6ceacf7a30ca56fdfee2c416c8e6c
eap7-wildfly-javadocs-7.2.9-4.GA_redhat_00003.1.el6eap.noarch.rpm SHA-256: 23ba7fe45a00dbcb4a223ba488fce317d1ebfc96e0889173e8126b58af5f55f8
eap7-wildfly-modules-7.2.9-4.GA_redhat_00003.1.el6eap.noarch.rpm SHA-256: 1ac29a432bbb5d548352d8490281e84a9073dd02470e96b9ac60f9ac0cc29901
eap7-wildfly-transaction-client-1.1.11-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 90b15360fec8ddc637801e9f7c8df88f11d952e47a5810d56dbdfef0189247b3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.