Red Hat Product Errata RHSA-2020:3639 - Security Advisory
Issued:
2020-09-07
Updated:
2020-09-07

RHSA-2020:3639 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 8 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

This release of Red Hat JBoss Enterprise Application Platform 7.2.9 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.2.8, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.2.9 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • jackson-databind: Serialization gadgets in ibatis-sqlmap (CVE-2020-9547)
  • jackson-databind: Lacks certain xbean-reflect/JNDI blocking (CVE-2020-8840)
  • jackson-databind: Serialization gadgets in anteros-core (CVE-2020-9548)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10672)
  • jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution (CVE-2020-10673)
  • jackson-databind: Serialization gadgets in shaded-hikari-config (CVE-2020-9546)
  • undertow: EAP: field-name is not parsed in accordance to RFC7230 (CVE-2020-1710)
  • wildfly-undertow: Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests (CVE-2020-10687)
  • jsf-impl: Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371 (CVE-2020-6950)
  • resteasy-jaxrs: resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class (CVE-2020-1695)
  • wildfly-elytron: session fixation when using FORM authentication (CVE-2020-10714)
  • dom4j: XML External Entity vulnerability in default SAX parser (CVE-2020-10683)
  • wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain (CVE-2020-1748)
  • hibernate-validator: Improper input validation in the interpolation of constraint error messages (CVE-2020-10693)
  • hibernate-core: hibernate: SQL injection issue in Hibernate ORM (CVE-2019-14900)
  • wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API (CVE-2020-10718)

• wildfly: unsafe deserialization in Wildfly Enterprise Java Beans (CVE-2020-10740)

  • jboss-ejb-client: wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service (CVE-2020-14307)
  • jboss-ejb-client: wildfly: Some EJB transaction objects may get accumulated causing Denial of Service (CVE-2020-14297)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details about how to apply this update, see:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.2 for RHEL 8 x86_64

Fixes

  • BZ - 1666499 - CVE-2019-14900 hibernate: SQL injection issue in Hibernate ORM
  • BZ - 1694235 - CVE-2020-10683 dom4j: XML External Entity vulnerability in default SAX parser
  • BZ - 1730462 - CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
  • BZ - 1785049 - CVE-2020-10687 Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests
  • BZ - 1793970 - CVE-2020-1710 EAP: field-name is not parsed in accordance to RFC7230
  • BZ - 1805006 - CVE-2020-6950 Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371
  • BZ - 1805501 - CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages
  • BZ - 1807707 - CVE-2020-1748 Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain
  • BZ - 1815470 - CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1815495 - CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
  • BZ - 1816330 - CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking
  • BZ - 1816332 - CVE-2020-9546 jackson-databind: Serialization gadgets in shaded-hikari-config
  • BZ - 1816337 - CVE-2020-9547 jackson-databind: Serialization gadgets in ibatis-sqlmap
  • BZ - 1816340 - CVE-2020-9548 jackson-databind: Serialization gadgets in anteros-core
  • BZ - 1825714 - CVE-2020-10714 wildfly-elytron: session fixation when using FORM authentication
  • BZ - 1828476 - CVE-2020-10718 wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API
  • BZ - 1834512 - CVE-2020-10740 wildfly: unsafe deserialization in Wildfly Enterprise Java Beans
  • BZ - 1851327 - CVE-2020-14307 wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service
  • BZ - 1853595 - CVE-2020-14297 wildfly: Some EJB transaction objects may get accumulated causing Denial of Service

JBoss Enterprise Application Platform 7.2 for RHEL 8

SRPM
eap7-dom4j-2.1.3-1.redhat_00001.1.el8eap.src.rpm SHA-256: 71c80ffd56fb0b13a538f3d2d6370b05084261eb0eb3938f827ec4c877fcc3a5
eap7-elytron-web-1.2.5-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 44349423ec467967fe87d1f0f09a8abc5a11cbf19e1264fe7d3914da2b8e00ce
eap7-glassfish-jsf-2.3.5-13.SP3_redhat_00011.1.el8eap.src.rpm SHA-256: 7dfe2bf43be5176ab923b2b340ddba2a32b321b591fb77b0e2f653fe44325f7c
eap7-hal-console-3.0.23-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 0857d8c879c9221099960711550a68f23da2d24d8c5e9e03854381638693f6a6
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 42b32fdf28417f18d8900be0e689d3a55cceca784d4dc5cefefad908bebbbe56
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 7f12ff0a0bdf502c7e78c4a66378af2cb74a26436f14021185b8ec933914b1d9
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 24ffbb0ac7db7038718311b45bc49a7aee790978ca5fb7840f019c5644ad748c
eap7-jackson-databind-2.9.10.4-1.redhat_00001.1.el8eap.src.rpm SHA-256: 8197531a19a4fe33d1d54247a0c139d32619521370d77392e067ca91fa489722
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 742391b0de5c186d1e3858a7b5062a93af29758ddcf7bcd50af98484a3f2f7a1
eap7-jboss-jsf-api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el8eap.src.rpm SHA-256: 499f53a39bfd78f23ae0a877d1f52d0bc3fbad2716f3bce2ce50f8237b9c32df
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: ec9e93b1bce5cfba91ea537ae8cfc8adec610a4f1d65ea15e79d86bdcf82dbd7
eap7-jboss-modules-1.8.10-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 904ca8550dbd35e0c1227ba0f67affacf3823dc245d08b63d28d3f524ab35622
eap7-jboss-server-migration-1.3.1-13.Final_redhat_00014.1.el8eap.src.rpm SHA-256: 94593b0fd29d50f4511dfeedd2abb36882b94b81e8758b0471d30821e1e5fc36
eap7-jboss-xnio-base-3.7.6-4.SP3_redhat_00001.1.el8eap.src.rpm SHA-256: 2b6708ef60a8162a90b2cdaf4dc19bad9ec40539e8313431c168a8fd3a8911c4
eap7-resteasy-3.6.1-10.SP9_redhat_00001.1.el8eap.src.rpm SHA-256: d7a252c90c7a16010ee121abed0bb9f18dbe49208771b83331b17c2cb6d8da4d
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el8eap.src.rpm SHA-256: f566d8bb33a74605032edfc8b10e636368ef084b48d83a81c3ca6326d838f615
eap7-weld-core-3.0.6-4.Final_redhat_00004.1.el8eap.src.rpm SHA-256: 4d1d5e514e5121a79b0fa982164442dbf6734e12a1b33da30906448d1104321e
eap7-wildfly-7.2.9-4.GA_redhat_00003.1.el8eap.src.rpm SHA-256: dcfc9038e6fd711f1c4e748c762998824e8ad813019a01b93b0b09c776221edc
eap7-wildfly-elytron-1.6.8-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: db3f67f595ce4d4fe9ae7534c8675388a2e6ba0a59c45b283ad1b1a36297fcd9
eap7-wildfly-http-client-1.0.22-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 8cb1c528890e3aab22e5e8bf6346d1255c67218d5f2807aecbfbce9c3e0b4f39
eap7-wildfly-transaction-client-1.1.11-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 8d83c8984523059844d0dab115c4b1af6c48fb25080faef4ecd3ab4fee6d349f
x86_64
eap7-dom4j-2.1.3-1.redhat_00001.1.el8eap.noarch.rpm SHA-256: e9e83b792779f1ce7eff8e886695839b061040b50a000f18a39ace72f95249dc
eap7-glassfish-jsf-2.3.5-13.SP3_redhat_00011.1.el8eap.noarch.rpm SHA-256: a548a7f5066fcfa27e7380a363e93df8c866d701d6d96bc8836cb9733c34dc99
eap7-hal-console-3.0.23-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 36566687faf2102b439bc83a36dc379b7bb6e931b098358649a3b663d0f73b77
eap7-hibernate-5.3.17-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: e0f197c516b144744f31f36d9e061608c56d020435a1fb6d7359b175bd407b43
eap7-hibernate-core-5.3.17-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 1c3d990c6b6a77d664e54be2f3202e48523185f5d2df80173446761adaa0b4f5
eap7-hibernate-entitymanager-5.3.17-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 5fa829f72164798d298b0febd0fb926ba21a71d31572427095c55e55c1b291c6
eap7-hibernate-envers-5.3.17-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: ed5ac948266b23106c46508c623f0562bd4a247ce97ed70566abd9054f8285c6
eap7-hibernate-java8-5.3.17-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: de5181d23ec8470926741ccedd9d885a881a0dde3d2d232a674d08ff5beb5454
eap7-hibernate-validator-6.0.20-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: da0b153b942803801c11811139bf26b140a67b9b3ce521c0b6fc85061bcfc0ac
eap7-hibernate-validator-cdi-6.0.20-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: a5bb6be61cfc35cb4463affb2627fb55a9acf42d83c931d20a88abaa7e9ae50d
eap7-ironjacamar-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 93a2831b8cbfe91af9e003d24383a9a08f4ad125703edbf4a5ab16fb6b264498
eap7-ironjacamar-common-api-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: f4b7ab15813e9b53f94a94575b8bc8a41e584108c0671d7b6918023156bca8a4
eap7-ironjacamar-common-impl-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 2d1082978f06e877144311bd09e4d40d70aa79b2622d2a94f13b147187d52a35
eap7-ironjacamar-common-spi-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: baec6d0f3746ac5fbe430409edbf7b98390c5e49a7315fafecbc5127db8eec5b
eap7-ironjacamar-core-api-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 83763985ca09d0681ee02c2501cd368efa16bd6ce16caeb27a9953bdc645147e
eap7-ironjacamar-core-impl-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 294763a0091660427dedd4bed71353dd13c2f70e4e010ba3cedba2c2905c773b
eap7-ironjacamar-deployers-common-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: a3ec6d380f0c26fe2dedaa3929c8a1b557fe231fed4ad0fccb18a74f02382e90
eap7-ironjacamar-jdbc-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 7177c1367549c6a51c7fa8d8e33cb303c99039cf39d37317b7d074bec9ac6361
eap7-ironjacamar-validator-1.4.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 53c526a4f2ca03530a10224a7f4fa3c8169ac1a2076337e7c7cc996c66841500
eap7-jackson-databind-2.9.10.4-1.redhat_00001.1.el8eap.noarch.rpm SHA-256: c704fc399bbf6b799a3493c1dc53e1e84d3928329398754e687225f8dcfac92b
eap7-jboss-genericjms-2.0.6-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: b5c8168e27f8fe568f1c5fd34ff13f98b537b2673688a56fdca2af02bd191e1c
eap7-jboss-jsf-api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el8eap.noarch.rpm SHA-256: 9f207a3e515e597b378f9ba24dda741b19a4864870150cf16a9d284706bacc7e
eap7-jboss-logmanager-2.1.15-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 9b06a8b7bd6e1038ac5790d8f69e4384ebbd830dbb22bded16a8b21cf1ef897d
eap7-jboss-modules-1.8.10-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: c73323a375707b6484a2865ceb4e14aeb936b82a377af77cceb983eccfcb00b6
eap7-jboss-server-migration-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: a607f5447bc7531e1e5d2db7fab20602815d449b1acc90994bb44229e615b26a
eap7-jboss-server-migration-cli-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 80c75e5e9d6ded9678d26974f7a6980e82ff5b1a405520cf8dbe2379e72d371a
eap7-jboss-server-migration-core-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: a3dc74f6c1bfe61fdc4572004085f515ebf1aaa402dac1a01b21f92443daecfb
eap7-jboss-server-migration-eap6.4-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 1ba9bb1ed942926c585f2e695de584b831d657b80697a445135d2f8baf5c795b
eap7-jboss-server-migration-eap6.4-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 4c2b261d5b814ff55eb42cfd074dddf17398037b51ef523828111d7a016b0403
eap7-jboss-server-migration-eap7.0-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: fbdc2a418dd1dbd6a359fb4faae83bab6ba337e4e383f5ff2ed02117f3726672
eap7-jboss-server-migration-eap7.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 7d2aa64a5cd338ecadef85c54c752d7ddd9763dedb6a51d7945f9d7ec9a97413
eap7-jboss-server-migration-eap7.1-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 9dbd4f784a183f93cbce1fba73966236c3b618bd95d658d77257ff5a29c020ef
eap7-jboss-server-migration-eap7.1-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 95e853b1e1920982e66028aa56f51f8f85e34fb60fad3ca8f97faeb89929cb8f
eap7-jboss-server-migration-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: f48145cb0d55061cc6fb84a0bc6fcacc27f09b10420fd21d57588c9c71abcdd4
eap7-jboss-server-migration-wildfly10.0-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 0062894605d24f86307f7c905a525fcee4cbef4c90a9cd0ec3928d83eb243ecc
eap7-jboss-server-migration-wildfly10.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: c143a8d924a7b39d501c0f85e9d4b5af5e6bf3a720a7311df2f31a8bf3eee985
eap7-jboss-server-migration-wildfly10.1-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 7b3d23d8ff6ee55a333ece8af76d71e8f3e7ca467c771c063300bd5adf61b4f3
eap7-jboss-server-migration-wildfly10.1-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 35014e162749c67496c16b0ca40c7d320a350aa052cc52feae69709446f57554
eap7-jboss-server-migration-wildfly11.0-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: ec2e5672a84b383f4653eecd11abf364e38730cacec74ef0ab38df5e176c0de1
eap7-jboss-server-migration-wildfly11.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 8fe4670e9f04112610649f149d73e02dab0c7c4c0d2459ae2d8b00ad3c21e500
eap7-jboss-server-migration-wildfly12.0-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: becfaa58647282777cba8c778be97bb5a64a9c0f7e01d3aaedfcd3ce82cddce8
eap7-jboss-server-migration-wildfly12.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 5e98bff5a106d0addc27a2fb12fa7cafbfe1daf8ff3ed50480d54050a38c8603
eap7-jboss-server-migration-wildfly13.0-server-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 7a4ebd28621a4df5d033b6e88c6741f662fc4310b2dfe331aed5f9c8ace803e5
eap7-jboss-server-migration-wildfly14.0-server-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 4ab93587bcd30129c35c51f13ec40f1c093e3283c979ea1ddfa03ebebc3afacf
eap7-jboss-server-migration-wildfly8.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: d48d675daf0bb30720d49f5f796007521fdd1b949a9c7f4a84c34aa86dd5c970
eap7-jboss-server-migration-wildfly8.2-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 5a1d9d29b48f1a1cb23aa2eb702d394ba1e16f5514179b9fbf2769f9bc5ba74c
eap7-jboss-server-migration-wildfly9.0-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 9efa46ca38c060454497a2cae9d4a7d90f97689344eb255b9aff31ed49dec816
eap7-jboss-server-migration-wildfly9.0-to-eap7.2-1.3.1-13.Final_redhat_00014.1.el8eap.noarch.rpm SHA-256: 55d1c551ae83c5a7cd32763fce9255b474499ef344628f34362849014ae9b460
eap7-jboss-xnio-base-3.7.6-4.SP3_redhat_00001.1.el8eap.noarch.rpm SHA-256: b7664c5deefcb95566529f84cab873c8c157a552ef96490f544f4a71311d5c3e
eap7-resteasy-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: b46085bb45017c067df7d8c276e8bfbd7157f25c8078f5e5a394dc51b7c24ab5
eap7-resteasy-atom-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 25399f17632439dc5c7f35c1d58b1beaaf4814ac1322ca2507c05638cd6620de
eap7-resteasy-cdi-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: ca285b7e69af4db08cc57e7ed8dc8d318b8cdfafbfb80aec047d03404d9b4038
eap7-resteasy-client-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 219556e37a70c1ce33131587365556d4a0add326acbc4f3840b763e466ac3e67
eap7-resteasy-client-microprofile-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 08aad8b55bb43326f6a79cd1783300a2e9229dc74460c216c0480214d7ec6116
eap7-resteasy-crypto-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 97f69af8881328267c3d576949ff2c08ec3b90e33a8f35c5148c00f59b381433
eap7-resteasy-jackson-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: cd2838b9689824f930cdae4c932db611d7ad50f0c710ca222b050a418a41e727
eap7-resteasy-jackson2-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: cb58735092ab5244ae32ea3454bd859ba20afd2ba3a1477d3bcd42f4e629ee75
eap7-resteasy-jaxb-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 5083fe02fb14b4d00e4c386846825c0b5a88e0383ea5701c944575fe792733f3
eap7-resteasy-jaxrs-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 06a533bf861fd78cb035e858c5812f9783a6d4dbcea4c0a8deee2c6e0fcd3405
eap7-resteasy-jettison-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: be8a6d7f484e86dac505e51e95c05d995dada860067bf2c6108c1a96f48a9cd3
eap7-resteasy-jose-jwt-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: df392720d5d808d9f5914f0f9dcd0ef0da9110fd95c9eb578126279aeeb356e5
eap7-resteasy-jsapi-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 906eb2ecceafc70ab8aa22acb7bc55d781c8937aac0d340f2777be5d474eaebe
eap7-resteasy-json-binding-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: cf17f0979f913014b689374252c434cec37c618e4c3294290a1ef6d4cab8ca9f
eap7-resteasy-json-p-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: abf5d7b1ae4538cf49dc8c61238bfefdff3fa87d3dc890d63e86c639cd3191fd
eap7-resteasy-multipart-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 3c75f1ad775ec2881bd0ac03955c03841378e31efbe3e09e64e73cd8d51118c9
eap7-resteasy-rxjava2-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 661c6d169908b2eeb786a970433de68f7a56ebc27d82bc21e01dfbd7e9604e12
eap7-resteasy-spring-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 02ddc0ae16b3573199267ee7d4b29d8aec7ae34847cd701d1d47d9eb7ae1afdd
eap7-resteasy-validator-provider-11-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 761296e7b636b0b22c7dced418bd4c338baaa49a48c775e9e76f76946c86eb00
eap7-resteasy-yaml-provider-3.6.1-10.SP9_redhat_00001.1.el8eap.noarch.rpm SHA-256: 61b7e0add77791eadacc685347534160eae2a7e11fcd40138af589affa72b095
eap7-undertow-2.0.30-4.SP4_redhat_00001.1.el8eap.noarch.rpm SHA-256: 6aec1d1d68e6acbb605f02af642f0377b80d701d647ffe30cfdae8ba36f3f97a
eap7-undertow-server-1.2.5-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 80ba0a2dc08ccbce4529249c2893e789ba6682c6ceeb2baa7992d66ab79ba841
eap7-weld-core-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 29a0901fca4a280a5b311132cc60cf653fb36c86ef43b6463e8f0154012d742d
eap7-weld-core-impl-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 67784ecd930123cb9b80926ec5deaec99b81af11657b48c5e2014a57694ca770
eap7-weld-core-jsf-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 7dde25a358a6c60c15bf4f46bb952989c6bc63f8908ab2cf7fed48e1f234be21
eap7-weld-ejb-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 76564ac7c9f5ff608deba4bb476c80422a72c8a818e87f93d323f59bb8786b4f
eap7-weld-jta-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: c167f46cb277e7bc891aecb86c4880c58a0155bb9f4e66598d5ab7002857b981
eap7-weld-probe-core-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 1078bfa6f2c9de307436b196041eeb0449410b3b0b8b1811884e65f2903722c1
eap7-weld-web-3.0.6-4.Final_redhat_00004.1.el8eap.noarch.rpm SHA-256: 38f150c526391a6182758635599787adac35170cb00c4e0da18b94141e91c832
eap7-wildfly-7.2.9-4.GA_redhat_00003.1.el8eap.noarch.rpm SHA-256: 2a06a837807c7dc2b5d108d547ab4deab0e795c28a181486af5a1f76ade25285
eap7-wildfly-elytron-1.6.8-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: f40299069615f05df83072d2bb497f800661ef94782758555d61450c0521426c
eap7-wildfly-http-client-common-1.0.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 35d6a7a3eeae280b73e29d68e379d16a81587b4a42c89277354f794aa9e10a4a
eap7-wildfly-http-ejb-client-1.0.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 044244641aecc387e0c257abaa9cbe641755e37d14c6733029c64df6d5ca8226
eap7-wildfly-http-naming-client-1.0.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 7c70f4df772ade1beb9f9d77f07b060a0825180fdbe83f9349ad0914bde52dfb
eap7-wildfly-http-transaction-client-1.0.22-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: c3d3d4bdc4be0dd7fbb5a3ef8f12f1177de23fdccafb7828c597a23ec718e670
eap7-wildfly-javadocs-7.2.9-4.GA_redhat_00003.1.el8eap.noarch.rpm SHA-256: 431435a2f00f0181e601234a6660dbc281f51951b119462c664d9f872b1d999e
eap7-wildfly-modules-7.2.9-4.GA_redhat_00003.1.el8eap.noarch.rpm SHA-256: 521083fb8a74a476e9c5e8654d20da36c862b82c6540bef3d14042d985700529
eap7-wildfly-transaction-client-1.1.11-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 3434c41d24267fc9956925e40dbebe6f52e2d3b395be6fce0134da16af8f0993

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.