Red Hat Product Errata RHSA-2023:7637 - Security Advisory
Issued:
2023-12-04
Updated:
2023-12-04

RHSA-2023:7637 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.4.14 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.13, and includes bug fixes and enhancements.

See the Red Hat JBoss Enterprise Application Platform 7.4.14 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • undertow: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  • avro: apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK (CVE-2023-39410)
  • guava: insecure temporary directory creation (CVE-2023-2976)
  • eap-galleon: custom provisioning creates unsecured http-invoker (CVE-2023-4503)
  • jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() (CVE-2023-26048)
  • jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)
  • sshd-common: apache-mina-sshd: information exposure in SFTP server implementations (CVE-2023-35887)

A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.4 for RHEL 7 x86_64

Fixes

  • BZ - 2184751 - CVE-2023-4503 eap-galleon: custom provisioning creates unsecured http-invoker
  • BZ - 2215229 - CVE-2023-2976 guava: insecure temporary directory creation
  • BZ - 2236340 - CVE-2023-26048 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()
  • BZ - 2236341 - CVE-2023-26049 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies
  • BZ - 2240036 - CVE-2023-35887 apache-mina-sshd: information exposure in SFTP server implementations
  • BZ - 2242521 - CVE-2023-39410 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
  • BZ - 2242803 - CVE-2023-44487 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  • JBEAP-25378 - (7.4.z) Issue with cert tests when upgrading openjdk from 17.0.6 to 17.0.7
  • JBEAP-25380 - (7.4.z) Upgrade WildFly Core from 15.0.30.Final-redhat-00001 to 15.0.31.Final-redhat-00001
  • JBEAP-25419 - (7.4.z) Upgrade xnio from 3.8.10.Final-redhat-00001 to 3.8.11.SP1-redhat-00001
  • JBEAP-25451 - [GSS](7.4.z) Upgrade yasson from 1.0.10.redhat-00001 to 1.0.11.redhat-00002
  • JBEAP-25457 - (7.4.z) Upgrade Undertow from 2.2.26.SP1-redhat-00001 to 2.2.28.SP1
  • JBEAP-25541 - (7.4.z) Upgrade Hibernate ORM from 5.3.31.Final-redhat-00001 to 5.3.32.Final-redhat-00001
  • JBEAP-25547 - (7.4.z) wildfly-core: Upgrade jetty to 9.4.52.v20230823
  • JBEAP-25576 - (7.4.z) Upgrade Infinispan from 11.0.17.Final-redhat-00001 to 11.0.18.Final-redhat-00001
  • JBEAP-25594 - [GSS](7.4.z) Upgrade hal console from 3.3.19.Final-redhat-00001 to 3.3.20.Final-redhat-00001
  • JBEAP-25627 - (7.4.z) Upgrade SSHD from 2.9.2.redhat-00001 to 2.9.3.redhat-00001
  • JBEAP-25657 - (7.4.z) Upgrade Artemis from 2.16.0.redhat-00049 to 2.16.0.redhat-00051
  • JBEAP-25685 - (7.4.z) Upgrade JBoss Marshalling from 2.0.13.SP1-redhat-00001 to 2.0.14.SP1-redhat-00001
  • JBEAP-25700 - [GSS](7.4.z) Upgrade Jandex from 2.4.2.Final-redhat-00001 to 2.4.4.Final-redhat-00001
  • JBEAP-25716 - (7.4.z) Upgrade Weld from 3.1.6.Final-redhat-00001 to 3.1.10.Final-redhat-00001
  • JBEAP-25726 - (7.4.z) Upgrade wildfly-transaction-client from 1.1.15.Final to 1.1.16.Final-redhat-00001
  • JBEAP-25772 - (7.4.z) Upgrade Avro from 1.7.6.redhat-2 to 1.11.3
  • JBEAP-25779 - (7.4.z) Upgrade jboss-cxf from 5.4.8.Final-redhat-00001 to 5.4.9.Final-redhat-00001
  • JBEAP-25803 - (7.4.z) Upgrade jboss-jsp-api_2.3_spec from 2.0.0.Final-redhat-00001 to 2.0.1.Final-redhat-00001
  • JBEAP-25838 - (7.4.z) Upgrade Netty from 4.1.94.Final-redhat-00001 to 4.1.94.Final-redhat-00003
  • JBEAP-26041 - (7.4.z) Upgrade WildFly Core from 15.0.31.Final-redhat-00001 to 15.0.32.Final-redhat-00001
  • JBEAP-25004 - (7.4.z) Upgrade runtimes-java-api from 1.0.8.redhat-00001 to 1.0.9.redhat-00001
  • JBEAP-25085 - [GSS](7.4.z) Upgrade Undertow from 2.2.25.SP1 to 2.2.25.SP2
  • JBEAP-25086 - [GSS](7.4.z) Upgrade WildFly Core from 15.0.27.Final-redhat-00001 to 15.0.28.Final-redhat-00001

JBoss Enterprise Application Platform 7.4 for RHEL 7

SRPM
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el7eap.src.rpm SHA-256: 67bced4edf70a2031772273fb88ba4829988d8672a6bedbfaffae62be3ddfe13
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el7eap.src.rpm SHA-256: 97f99067cb60c87e595918112df48952dcae4ea5a50e19092f0156fb35e6093d
eap7-avro-1.11.3-1.redhat_00001.1.el7eap.src.rpm SHA-256: 94c249d59ddff5fbc1562db244a0a06cbc0eec902f06e2dbbc526b34fe575ed3
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el7eap.src.rpm SHA-256: cb5851bf806b52fb9bc08d4dcdb5d3f8563e86274ba676492866f3b443e721db
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 742fe4ef49e90ce07c3410beb726fd6fa3685fe3613fc117eab736c65ab9828a
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: aab68363546fa98cd78e7d6ea3ac6a487ef7e244b48d3588f185e9af0e728986
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 9e281689064d77fc34a9d3dac37ebb77316ee7f6a54fa9cadc2fdb4b772d5687
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: a8eb61836c8aa04d26a161de60219f4f6a11b36a2b03c2f811faa5792761554a
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: b947102be05b0a779829f6b3e3a58fc62280bee815f095b650131127a6ee6fd3
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: eb7e2e45f5a92ff7e91a6659353d0f3280e1c8b3478fac654c61911952740236
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el7eap.src.rpm SHA-256: 7a48315cd11f56cdc544de91df179425a0b10384191384acd3102efee19bd681
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: eca2472aac3ce8eb8cd2161a1edee948f206bae596a7801a1640358081e38dda
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: cb2b62f612dc1f2bedfcd327432444ddd7081719346dc9b9d87d83ccc8e23ea0
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: d04fb02892d37032bb48968e162dd3dd3e79d507887a759d5105e6a4df5ab961
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: df223f52dd6bea3015e18024b02caed3a3beaa0b8756b17b187ec221d3f5d53b
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 6107e651b98a216ea13536aacfa266bcc9a375d8549d18deed92636f258bf3da
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el7eap.src.rpm SHA-256: cc90264c799f9d10f48f48b118dae1f24c616b431deb5e584d6bdd7056846838
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 7fe1975bacda02205d41ba2efb05319ddb0d21b5dc528d1735c4aa3012630614
eap7-yasson-1.0.11-4.redhat_00002.1.el7eap.src.rpm SHA-256: af9f9eda7fa61b44ca7383855fe4644a948ad15b602eced0ab679cda88f71cbf
x86_64
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 1f14c78257e8e2280da2bd4cb10eed4ed4bcba7ddbdc0392a77aafa6576b34b4
eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 07aebc81d6a87f32977838ed727700ecdb8ac7c0f1345b0ff83ea2d7cf254a10
eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: e5e0971029fae797c6ae7e36ba4b5597a42723e7e5ea7110c74a6185bdff42e6
eap7-activemq-artemis-core-client-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: ee42cbde1b1bfd6b3996ccf7da19e72e9b4e8fd4953cdc409c86e3a36800cfb6
eap7-activemq-artemis-dto-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 32e850c416584c833db57aa279d964ed36cec887cb0c0125682aa7191d349d5a
eap7-activemq-artemis-hornetq-protocol-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 5f0d32b4dd61f94652719fd2c0e45a9a9aef59a93090a5dce10b95dc005c142a
eap7-activemq-artemis-hqclient-protocol-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: f86c97c1660cb23cf4abd5da086234ca9a0caee913c1c0cdd3d72754590068be
eap7-activemq-artemis-jdbc-store-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: d362c77df409eec1f1e47de725e0c9b48426eb49f17cdbd13cb31e3cd5ea2c16
eap7-activemq-artemis-jms-client-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 588bcbaba168a96bec54362abc7c00ce7f6bea28cc1b126aba065937583e6365
eap7-activemq-artemis-jms-server-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: b250d171b60b2c2d59f1024aaf593be14e3cb88db463ba885c8556461f8fc072
eap7-activemq-artemis-journal-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: be3979da1e2ac0859a5464923574a619983da8cd7edff00b388908e06feabba1
eap7-activemq-artemis-ra-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 1e302af5fe2b4ee38a4b556a6c95a4388afbed79ebc74111ac8f1838126e5da9
eap7-activemq-artemis-selector-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: f02587f3d9c3a146b65c4307b1aecb245a20600ae5c3679272083f62ee63b28b
eap7-activemq-artemis-server-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: bfc3e5956f05acebeac6bee32adafe941175c06cd21be2e5572c41cac7c80a01
eap7-activemq-artemis-service-extensions-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: af745193a7a759e523da381b03f331ef818ebfe7abfe87fc6e82d77d23603c0d
eap7-activemq-artemis-tools-2.16.0-17.redhat_00051.1.el7eap.noarch.rpm SHA-256: 29b4d25ef73ad0cef55ba0c1135bd7e7a6d84727fc12751e5f2883851e4a7142
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el7eap.noarch.rpm SHA-256: ff424983b9cbfc532064d13f339a59b2ad1753d05e1ade607275cebaa8e9d9e8
eap7-avro-1.11.3-1.redhat_00001.1.el7eap.noarch.rpm SHA-256: f688baf6a10ca596033cf42ab7604245d5d581e29fe5499394f14ff20e84de7c
eap7-guava-32.1.1-2.jre_redhat_00001.1.el7eap.noarch.rpm SHA-256: 2974a72d562c4d792d0ceaa21916c47dedcc460ef58b9264dd3d3c97cd99cbad
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el7eap.noarch.rpm SHA-256: 008c14595a6ff43c4526ea6061698647d590140e3e2111ab4ac1d7a1d18c004a
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 4a8fcd19deb8a06f80a9f03ad56caaf5c0d738033951d64084e483136f748c83
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: ffbfebc37a218cea884d2fc9f5e4c1f79aae5030b023b46f225d6b6205dab67d
eap7-hibernate-core-5.3.32-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 357e0e1fb6ab960f8e64d557810db7f78cd02ffac6cfac014934855d734ac72f
eap7-hibernate-entitymanager-5.3.32-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 445b78dccc21b6f18b01b1507251d735bd5e01391e429f93df7940af81e16dcc
eap7-hibernate-envers-5.3.32-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 26b3ad3e016f83aa19009057c18fa36bd93916fc6054b321d53c35552d65afee
eap7-hibernate-java8-5.3.32-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d30a3f74bfe3ee0ec99eb0461f70203256acdc9a797a5d72bdd5a8d73ae18e4d
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 8ff94277dcf203b0ca9d432684023dab546c804866fc812ba32ec94129970389
eap7-infinispan-cachestore-jdbc-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: fc013147d22bc2634c8e929062f1fe7258bbc28964f6e9a3221fc8f33469cfbd
eap7-infinispan-cachestore-remote-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 95fc13af3e4c9e382da6e1f7b0c2d7a919e9374600c67dda484c53fe758a0789
eap7-infinispan-client-hotrod-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: a309e64402f974ea988eeccd33d8bf8d2eb572b494da62b9561b63641d95d35d
eap7-infinispan-commons-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 2545958f538649340c46640835db2c2132d6f291fbce92095a46983617b948f4
eap7-infinispan-component-annotations-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 45824743dc6af851449a0ddd599c95c8a5050c6841eb882885050b9e025ad858
eap7-infinispan-core-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 073aba287bd8387a8a80e8c5a1b57876ae0280629515d9b377425f422df8e633
eap7-infinispan-hibernate-cache-commons-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 20b9957edcc23bc8a47f3309cf1a5bcfd6ed43b5e8977051c004730fdca425d8
eap7-infinispan-hibernate-cache-spi-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 22443d3bbaff6f79c183b722eebda01a27df160d594e3f106bcdf69e1705ddf2
eap7-infinispan-hibernate-cache-v53-11.0.18-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 406b29e1367956d2c163bb6ede06bd7091fe0b4f7f8520d3fc3812cfc984ecab
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 6a30d5d1aaf11053da7b4e6e0ede6e2e66c37c7e9c2d1ded08bfe20645aaaae7
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 6d789569dcd9ed55d628291c75284ddb4dc9628a1b05808e4e46c4cca3d9b5e4
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: b30e524d605484d8010a47a8ad96411232e9099430f7f6ce49a05aae75c69209
eap7-jboss-marshalling-river-2.0.14-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 1e3b27f290ea3611e8aa1b68bb82904d32428bb8c1a8f5cd94ff51e22dd038d6
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el7eap.noarch.rpm SHA-256: 1bdc5397a4ce8f51905e3a2c42ef789f54bdb978ff2936cbfe1361717a837ce8
eap7-jboss-server-migration-cli-1.10.0-33.Final_redhat_00032.1.el7eap.noarch.rpm SHA-256: 1658e981d6e6453307f13bf6c2c6764086e9b5c42aab945d3cfe3588e6819b11
eap7-jboss-server-migration-core-1.10.0-33.Final_redhat_00032.1.el7eap.noarch.rpm SHA-256: 2b9bc954d722fb53139905d5661487e5e6195e44b591cdb2aa4b8a4473688806
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 14f69251fe174eba07ca93bfb9bd01df0fa1fc7379859b1a38b83abe3b2e033d
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d0c0b8f8cb68aba048f39c257eaf7901fa23ab0fb602ff4ea94199ea472f26d6
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: aae38ca3951b1086ceefcecaa97f19c22c4a9e9e942aa265dd2882a20c693717
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 9939f2442b7615c3f74dc072ecee12d0cf782b86335837fcbdaf175710d0e0ac
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 70a8421fcf95aeda8a165e599a47bace603c5878337141bfa702aba5601c6582
eap7-weld-core-impl-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 88e1c0bb9fb7254575beb9aeaae638d8971d59f00115a697492b11672bc852fb
eap7-weld-core-jsf-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 9a550e87589b6d2e054b9c8d4137222e41276d36d029df2a3299a21f9f8c7e4d
eap7-weld-ejb-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 844d90af2c7ea4d38497e1b418e2adb91ba8479b42f5b4acc2608cc0517ac425
eap7-weld-jta-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 48deba8e75bbb1e4437ad77377f87c0ee3ad04995b4d158f2397f2e1a4cbc632
eap7-weld-probe-core-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b0c21d7b0406e7c1b614734d95494d6b6c2c5ffdc4b952625fd2833300d8c799
eap7-weld-web-3.1.10-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d800704c0c7518cabb430205ac19f0af24ed0162d60fdb55afe0f782907f67aa
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: f8ffe9fa8d1b065864c2f1976eadf56dc311fa133cd7b67c2925278ac713cb17
eap7-wildfly-java-jdk11-7.4.14-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: eea78b751250ff4edb9d7320f87003b31c053d720188bc490d217d6bbcbe0207
eap7-wildfly-java-jdk8-7.4.14-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 5ec3988ab2f4d009a66f4f1893a8975785a5c91b3187a327849964a6d5cad426
eap7-wildfly-javadocs-7.4.14-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 4ddfa0b2ec0d908803467b6f8346c13d149295332013096d787bff070fddc4af
eap7-wildfly-modules-7.4.14-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 4c47c5665b899bae383db10662daea94be3a558c64da87eb7374485dcf55d981
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b6e6166d206bd0d6352292b05340e9234d7c226e2e320a9aa0bf8a40f702905d
eap7-yasson-1.0.11-4.redhat_00002.1.el7eap.noarch.rpm SHA-256: 730aa9a8d7f09ca8744c8caac1e883cc387495b5a45cdd29af7ea30f00b08199

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.