Red Hat Product Errata RHSA-2023:7638 - Security Advisory
Issued:
2023-12-04
Updated:
2023-12-04

RHSA-2023:7638 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.4.14 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.13, and includes bug fixes and enhancements.

See the Red Hat JBoss Enterprise Application Platform 7.4.14 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • undertow: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  • avro: apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK (CVE-2023-39410)
  • guava: insecure temporary directory creation (CVE-2023-2976)
  • eap-galleon: custom provisioning creates unsecured http-invoker (CVE-2023-4503)
  • jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() (CVE-2023-26048)
  • jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)
  • sshd-common: apache-mina-sshd: information exposure in SFTP server implementations (CVE-2023-35887)

A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.4 for RHEL 8 x86_64

Fixes

  • BZ - 2184751 - CVE-2023-4503 eap-galleon: custom provisioning creates unsecured http-invoker
  • BZ - 2215229 - CVE-2023-2976 guava: insecure temporary directory creation
  • BZ - 2236340 - CVE-2023-26048 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()
  • BZ - 2236341 - CVE-2023-26049 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies
  • BZ - 2240036 - CVE-2023-35887 apache-mina-sshd: information exposure in SFTP server implementations
  • BZ - 2242521 - CVE-2023-39410 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
  • BZ - 2242803 - CVE-2023-44487 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  • JBEAP-25378 - (7.4.z) Issue with cert tests when upgrading openjdk from 17.0.6 to 17.0.7
  • JBEAP-25380 - (7.4.z) Upgrade WildFly Core from 15.0.30.Final-redhat-00001 to 15.0.31.Final-redhat-00001
  • JBEAP-25419 - (7.4.z) Upgrade xnio from 3.8.10.Final-redhat-00001 to 3.8.11.SP1-redhat-00001
  • JBEAP-25451 - [GSS](7.4.z) Upgrade yasson from 1.0.10.redhat-00001 to 1.0.11.redhat-00002
  • JBEAP-25457 - (7.4.z) Upgrade Undertow from 2.2.26.SP1-redhat-00001 to 2.2.28.SP1
  • JBEAP-25541 - (7.4.z) Upgrade Hibernate ORM from 5.3.31.Final-redhat-00001 to 5.3.32.Final-redhat-00001
  • JBEAP-25547 - (7.4.z) wildfly-core: Upgrade jetty to 9.4.52.v20230823
  • JBEAP-25576 - (7.4.z) Upgrade Infinispan from 11.0.17.Final-redhat-00001 to 11.0.18.Final-redhat-00001
  • JBEAP-25594 - [GSS](7.4.z) Upgrade hal console from 3.3.19.Final-redhat-00001 to 3.3.20.Final-redhat-00001
  • JBEAP-25627 - (7.4.z) Upgrade SSHD from 2.9.2.redhat-00001 to 2.9.3.redhat-00001
  • JBEAP-25657 - (7.4.z) Upgrade Artemis from 2.16.0.redhat-00049 to 2.16.0.redhat-00051
  • JBEAP-25685 - (7.4.z) Upgrade JBoss Marshalling from 2.0.13.SP1-redhat-00001 to 2.0.14.SP1-redhat-00001
  • JBEAP-25700 - [GSS](7.4.z) Upgrade Jandex from 2.4.2.Final-redhat-00001 to 2.4.4.Final-redhat-00001
  • JBEAP-25716 - (7.4.z) Upgrade Weld from 3.1.6.Final-redhat-00001 to 3.1.10.Final-redhat-00001
  • JBEAP-25726 - (7.4.z) Upgrade wildfly-transaction-client from 1.1.15.Final to 1.1.16.Final-redhat-00001
  • JBEAP-25772 - (7.4.z) Upgrade Avro from 1.7.6.redhat-2 to 1.11.3
  • JBEAP-25779 - (7.4.z) Upgrade jboss-cxf from 5.4.8.Final-redhat-00001 to 5.4.9.Final-redhat-00001
  • JBEAP-25803 - (7.4.z) Upgrade jboss-jsp-api_2.3_spec from 2.0.0.Final-redhat-00001 to 2.0.1.Final-redhat-00001
  • JBEAP-25838 - (7.4.z) Upgrade Netty from 4.1.94.Final-redhat-00001 to 4.1.94.Final-redhat-00003
  • JBEAP-26041 - (7.4.z) Upgrade WildFly Core from 15.0.31.Final-redhat-00001 to 15.0.32.Final-redhat-00001
  • JBEAP-25004 - (7.4.z) Upgrade runtimes-java-api from 1.0.8.redhat-00001 to 1.0.9.redhat-00001
  • JBEAP-25085 - [GSS](7.4.z) Upgrade Undertow from 2.2.25.SP1 to 2.2.25.SP2
  • JBEAP-25086 - [GSS](7.4.z) Upgrade WildFly Core from 15.0.27.Final-redhat-00001 to 15.0.28.Final-redhat-00001

JBoss Enterprise Application Platform 7.4 for RHEL 8

SRPM
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el8eap.src.rpm SHA-256: cd1ed5f15532f20f024f8bb81d9a1256050215b51238e282ff9b50eeee10de35
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el8eap.src.rpm SHA-256: e7dc0bed362ec29e719d341cf19ada401163da15c9b199c41b528286f7b5b199
eap7-avro-1.11.3-1.redhat_00001.1.el8eap.src.rpm SHA-256: 6bccbc127efa1966ba1034ad164bf54790588eed47189604f4ab5c58b9c274a9
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el8eap.src.rpm SHA-256: 56611039a8805fa71f642e54a6b38d1783d46929f43608b67d5038858abee3dd
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 643ba0d4c64f90844ff68943bf24955d8b0cdce5638b7e0aea76f154eb3a91bc
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 81250dadb5ec26bc56534d04e33c03f3f43cec565bb6182ac9aed804bdd55919
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 4b16050f625eb9375e1132d6f64e39d7fc6ef0acd0254e20ee5108386e4e9775
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: b109c0c77b67e2dcfe0667c51285955504e422cd3b86b397efd4477fcb09d4dc
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 0fb1038a6abdb378d33018d0b0ff90035e8286b086484ff43fe45bfbc2dc0ec4
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el8eap.src.rpm SHA-256: 53730c4501941d00eca6b67315a253ab7a35373202be93eefad2c5dda3ffd1aa
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el8eap.src.rpm SHA-256: 36b5a5ec31082a94bbd6e94e056c6767adccd086942cc1701021510df0fd903c
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el8eap.src.rpm SHA-256: 96c8dac31c29e94452a02d2945715688e61bf7af2432916e0f4095e82fdac43e
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 2572d393ed6e8273eb4d1ec9059e3e0d37042a0b60c7b396cb883eb2ffc1fba5
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 29eba3baed1b74ac42e20428d6ca64ec405007a565320c4ca3434f8f7417b802
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el8eap.src.rpm SHA-256: 5214d223c5305e48b426eba4d4393340ef93f76cdeabc47df6155d20f3200b72
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el8eap.src.rpm SHA-256: fd13c374875e84a93d7587ca825aedb62f48464cddc06afa0c4a02ea100f63fe
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el8eap.src.rpm SHA-256: b65223811acc06f4e96c3848b09b09a5b6a35193258175bd4ccf4243fca3848b
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 9bcd49b4a0cfa0890e41058d0ff93de017dc555a9333f30cd6b638a60bddf9ff
eap7-yasson-1.0.11-4.redhat_00002.1.el8eap.src.rpm SHA-256: 7e687c4c45a27d0d1a177b65355bba62f878264be85e9cc6eddd0e3f5c664feb
x86_64
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 7a13306dbebac3b693179980a4190ef3965b56b5993451ce79a86c664789e0a9
eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: d98abd2eae21a2a25e716ac5e07cd94cfcf965eb1db6d19cc20dd97ea1a6846d
eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: c4e4891e241bf4953900b4d1641bb5a302fdc4b6b3e6205bc636d755cb47ccb1
eap7-activemq-artemis-core-client-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 5ae21446f0293e1a1ec0e1b08aa43fe83090b5a538dcd6c5189ca0db2ed987d7
eap7-activemq-artemis-dto-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 05b830d6462d94ff003fef02417dcaf3a50907461d40fbc5c3423a08613a765e
eap7-activemq-artemis-hornetq-protocol-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: cac578d98e05c4b7658728b1fe1b578e6b9b915daa2dbfb149c3216cd9baeaf3
eap7-activemq-artemis-hqclient-protocol-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 103490eb3115632cbf7df0b0e7492460815e8f883edfd2e8760919a03118c995
eap7-activemq-artemis-jdbc-store-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: cdef5e80bc6c826ac25bf448f7e553641c0e9910bbca3161f11153e13148dc50
eap7-activemq-artemis-jms-client-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: ae657d454d7ab4ccdb3a63d8547ce653ce241cdda6b75e0f0e9908972e90db6f
eap7-activemq-artemis-jms-server-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 3e26eafe0c0a9ff48b50d051c06a1420562c65951b8e7c6d0df6b24cc34a0fd6
eap7-activemq-artemis-journal-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: ca3ca7930cbfd300266d5578b2e0cc787e14b3b4d4e9a8d847757682e90cde87
eap7-activemq-artemis-ra-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: c05db9f74724fc587d27c55b5fbcdb199f625a655bbd5867aa3a8032335d32e2
eap7-activemq-artemis-selector-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: b6ff93f9fb852401b96307293f6f9e2a9199406da960b68dc636f4a6cfb29d6c
eap7-activemq-artemis-server-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 10dd5027e324e2cd5fcd339f18924e5e72d5e0f1a094d7ac93dade4caaf8125a
eap7-activemq-artemis-service-extensions-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 39799ae0dcfa4ede340100c1099451bc258e8575375e5d95455c92552a5cc39c
eap7-activemq-artemis-tools-2.16.0-17.redhat_00051.1.el8eap.noarch.rpm SHA-256: 18c1e208ce1b3f3e108a6e6792bcb31e87d335d45dc214906cdc5bd4243c14a8
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el8eap.noarch.rpm SHA-256: 0ec550b1ab5a71d324f42e8795386074e14b93652ee09b45188d8ff9f502438d
eap7-avro-1.11.3-1.redhat_00001.1.el8eap.noarch.rpm SHA-256: e0f2dffd93b454882f667d7f432287a46c8f4fad04d21cdb1caed4ad1b0fadcf
eap7-guava-32.1.1-2.jre_redhat_00001.1.el8eap.noarch.rpm SHA-256: cce5f4bbe043e59bf12eb316726770b92be7b8a12364d8f8635e599730305973
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el8eap.noarch.rpm SHA-256: 362496714d1cbaa8c012b654ceb331126ad59551e9fd683e290007ecf4f439f3
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 605ea5d2315c4d49b249bd4b2bcc8822fd44d9e5f9f0abcab9efa2fcdcfa7dbd
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: bc6a92d79a11564de5739a54d5965cc0abd92c36d184e927378a41dcb29a9c1c
eap7-hibernate-core-5.3.32-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 967fb3b4a8e777d554bd828af6c2e03095c6b8b99109c7cf09244f22de7c896b
eap7-hibernate-entitymanager-5.3.32-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 6e05b2cd00d6fca6e3e89783a1a959955d53a18c13634300310e6aa774079308
eap7-hibernate-envers-5.3.32-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: dde7ec484d9fb763ff273c2dc803a80f97ececa75f334e7e59e43fbcda419668
eap7-hibernate-java8-5.3.32-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 18022d18b2a469776d6e5a61c0a746d88b8b2a599b7452cf5a974974a04e5d8c
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: c59482b5b318d130562894358dfc55b07bda5e03a4b23689119d8bb26fd9fdbc
eap7-infinispan-cachestore-jdbc-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: db6427dfacaf36e88be483487dfa56d9b9d7ddf944766b502d2089ed3827b492
eap7-infinispan-cachestore-remote-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 2bcf9469b6da67f234ff3f4dba45d0364ff25aad4fc380809aa217030fb2bf38
eap7-infinispan-client-hotrod-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: ae3a3a006ca08e326d09675e814a28866123f3ed1b9a084b8e163b6b4d1a7dd7
eap7-infinispan-commons-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 13d62bfc318b11349f1ea143c77db6a0b191d0f36d4889d8b3d6c593536d062f
eap7-infinispan-component-annotations-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 24e39066e51dab5a63906bfd99bf823dcdcab3c29ec8cb4b0d78cff12cb66c8e
eap7-infinispan-core-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: f0d98e885e3e93ee56d076ebab967a1b1038b49a996b038707f4712682fbd991
eap7-infinispan-hibernate-cache-commons-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 5953aea816451d639a667e141d57be6e5072ef932fb8b001a271ed8c3ea9f027
eap7-infinispan-hibernate-cache-spi-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: fdb1138ec2c7c7c2c48955f75b5bc0ef49a62c7e0b389e701ebdd760d6b82670
eap7-infinispan-hibernate-cache-v53-11.0.18-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: a33d729c9c03660f89150093158ec0a2585251f731f9a815867516830fb4dadd
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: adfa95f3539dbb99fbc497e954e632b5ad6c09bbd07e1ad9969e2b95075489ed
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 7bfdc055b0864acecf577fc7c36df9a3ea449c60716991225e0d5e3adb856c3c
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el8eap.noarch.rpm SHA-256: b03d19295b9539cf801f4cd303462d8959fdff428a6c70b60fdc0c1fa70367cc
eap7-jboss-marshalling-river-2.0.14-1.SP1_redhat_00001.1.el8eap.noarch.rpm SHA-256: 7717bedb92ef7f859f9a2809dd1e617d5237216a138c6558cdd72dbf888d63a8
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el8eap.noarch.rpm SHA-256: 81795656d927979539fde928985129cda8935f94671cdbe34df2c1cbe7a36b8a
eap7-jboss-server-migration-cli-1.10.0-33.Final_redhat_00032.1.el8eap.noarch.rpm SHA-256: fcd6bd81047882bc9cf857b29d3d33cd162b1c79d7456e70a2aeea6c2c10cc86
eap7-jboss-server-migration-core-1.10.0-33.Final_redhat_00032.1.el8eap.noarch.rpm SHA-256: b9d627c413ed06414f946ffce5bdf00fb5a2a9e61d8b0e0c5c2ffcc1f3bfcb5a
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el8eap.noarch.rpm SHA-256: 4ac2472f8d445f8a27c7870a66229783fce2b5d7f1a59b87d519789669786190
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 87190777be17b22c987ec9969f5beac606174defddebdf96ac40be563f8ec5bb
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 9da17b0d39388913d09d4339a44f7645db9d5a56650787141a4d73e994dc48cd
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el8eap.noarch.rpm SHA-256: 10d91e855babd8d49d2235eeedb35928daf92beb193b2c702030a54f6600f371
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: d12797282804ea26928c15f0c7a36256214ea75cbd6c5708642dfe7f42deba46
eap7-weld-core-impl-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 1b2c1b15e9f0ac3b4bceaa9f08a6530bcb1581d0ad4d55e639f32c7439348527
eap7-weld-core-jsf-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: ed2d5309f014cf81da27ccaf3aaad201821baa2630d23efbb1ecc5c2dc969e84
eap7-weld-ejb-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 849fa3680ca1efd2ceec0b4e26aea1c6ae5ddcbaad56a47e72752e969ef4f6d6
eap7-weld-jta-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 87c430bd6bf9a36b9b211d683023eb4538178baef71fb6d565bbd4f39ea3127b
eap7-weld-probe-core-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: a88be79c943936ae7a66e3b112c80654dd409a2b6ee9ee4ec52dd46586e4816c
eap7-weld-web-3.1.10-2.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: fc60de449e022d1a0f445586ded8633656ce83d16dc63c0598c8f7351738089b
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: 084240d8a8630f2583c9715986549b2954a1a094b6db52372b8fb5d0bf25cd12
eap7-wildfly-java-jdk11-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: 23e3154adbcf68ef426079b76472060f6b08b50a29c47f2ddcaaae719c349664
eap7-wildfly-java-jdk17-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: ee06787d8bbb1ed1263bd5e2ed04339ee8e54c964fb24624e0c1cd2bd02775c9
eap7-wildfly-java-jdk8-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: cdefaa0d74087bb1d690e2f08dea979d7850770751cdee39ce5fc41f0911a219
eap7-wildfly-javadocs-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: 940294802b609e9bfd18e709e2510524b8b6eacf4fbd1585463781e21ad3d766
eap7-wildfly-modules-7.4.14-5.GA_redhat_00002.1.el8eap.noarch.rpm SHA-256: 6365c0b73c868333b86e7a127cea8c0bcf35d74e263dc52f419b704f80926130
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 6c91cff777851148529aeb7e697ddd752399debc428d81c6f21f3ef050d3569a
eap7-yasson-1.0.11-4.redhat_00002.1.el8eap.noarch.rpm SHA-256: 722bd04c0940221638dfdd2de92b3bd84b60957f6b08e2109ef0925614b22189

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.