Red Hat Product Errata RHSA-2023:7639 - Security Advisory
Issued:
2023-12-04
Updated:
2023-12-04

RHSA-2023:7639 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.4.14 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.13, and includes bug fixes and enhancements.

See the Red Hat JBoss Enterprise Application Platform 7.4.14 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • undertow: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  • avro: apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK (CVE-2023-39410)
  • guava: insecure temporary directory creation (CVE-2023-2976)
  • eap-galleon: custom provisioning creates unsecured http-invoker (CVE-2023-4503)
  • jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() (CVE-2023-26048)
  • jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)
  • sshd-common: apache-mina-sshd: information exposure in SFTP server implementations (CVE-2023-35887)

A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.4 for RHEL 9 x86_64

Fixes

  • BZ - 2184751 - CVE-2023-4503 eap-galleon: custom provisioning creates unsecured http-invoker
  • BZ - 2215229 - CVE-2023-2976 guava: insecure temporary directory creation
  • BZ - 2236340 - CVE-2023-26048 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()
  • BZ - 2236341 - CVE-2023-26049 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies
  • BZ - 2240036 - CVE-2023-35887 apache-mina-sshd: information exposure in SFTP server implementations
  • BZ - 2242521 - CVE-2023-39410 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
  • BZ - 2242803 - CVE-2023-44487 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  • JBEAP-25378 - (7.4.z) Issue with cert tests when upgrading openjdk from 17.0.6 to 17.0.7
  • JBEAP-25380 - (7.4.z) Upgrade WildFly Core from 15.0.30.Final-redhat-00001 to 15.0.31.Final-redhat-00001
  • JBEAP-25419 - (7.4.z) Upgrade xnio from 3.8.10.Final-redhat-00001 to 3.8.11.SP1-redhat-00001
  • JBEAP-25451 - [GSS](7.4.z) Upgrade yasson from 1.0.10.redhat-00001 to 1.0.11.redhat-00002
  • JBEAP-25457 - (7.4.z) Upgrade Undertow from 2.2.26.SP1-redhat-00001 to 2.2.28.SP1
  • JBEAP-25541 - (7.4.z) Upgrade Hibernate ORM from 5.3.31.Final-redhat-00001 to 5.3.32.Final-redhat-00001
  • JBEAP-25547 - (7.4.z) wildfly-core: Upgrade jetty to 9.4.52.v20230823
  • JBEAP-25576 - (7.4.z) Upgrade Infinispan from 11.0.17.Final-redhat-00001 to 11.0.18.Final-redhat-00001
  • JBEAP-25594 - [GSS](7.4.z) Upgrade hal console from 3.3.19.Final-redhat-00001 to 3.3.20.Final-redhat-00001
  • JBEAP-25627 - (7.4.z) Upgrade SSHD from 2.9.2.redhat-00001 to 2.9.3.redhat-00001
  • JBEAP-25657 - (7.4.z) Upgrade Artemis from 2.16.0.redhat-00049 to 2.16.0.redhat-00051
  • JBEAP-25685 - (7.4.z) Upgrade JBoss Marshalling from 2.0.13.SP1-redhat-00001 to 2.0.14.SP1-redhat-00001
  • JBEAP-25700 - [GSS](7.4.z) Upgrade Jandex from 2.4.2.Final-redhat-00001 to 2.4.4.Final-redhat-00001
  • JBEAP-25716 - (7.4.z) Upgrade Weld from 3.1.6.Final-redhat-00001 to 3.1.10.Final-redhat-00001
  • JBEAP-25726 - (7.4.z) Upgrade wildfly-transaction-client from 1.1.15.Final to 1.1.16.Final-redhat-00001
  • JBEAP-25772 - (7.4.z) Upgrade Avro from 1.7.6.redhat-2 to 1.11.3
  • JBEAP-25779 - (7.4.z) Upgrade jboss-cxf from 5.4.8.Final-redhat-00001 to 5.4.9.Final-redhat-00001
  • JBEAP-25803 - (7.4.z) Upgrade jboss-jsp-api_2.3_spec from 2.0.0.Final-redhat-00001 to 2.0.1.Final-redhat-00001
  • JBEAP-25838 - (7.4.z) Upgrade Netty from 4.1.94.Final-redhat-00001 to 4.1.94.Final-redhat-00003
  • JBEAP-26041 - (7.4.z) Upgrade WildFly Core from 15.0.31.Final-redhat-00001 to 15.0.32.Final-redhat-00001
  • JBEAP-25004 - (7.4.z) Upgrade runtimes-java-api from 1.0.8.redhat-00001 to 1.0.9.redhat-00001
  • JBEAP-25085 - [GSS](7.4.z) Upgrade Undertow from 2.2.25.SP1 to 2.2.25.SP2
  • JBEAP-25086 - [GSS](7.4.z) Upgrade WildFly Core from 15.0.27.Final-redhat-00001 to 15.0.28.Final-redhat-00001

JBoss Enterprise Application Platform 7.4 for RHEL 9

SRPM
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el9eap.src.rpm SHA-256: 7457b9dc671d7c345a1795253866890e558fe7a7ef9edb09fef8c7a3da14c38d
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el9eap.src.rpm SHA-256: c1a356214fa5d6edf009acba04f1c60aba9a5b3ea81ca926005780642db82427
eap7-avro-1.11.3-1.redhat_00001.1.el9eap.src.rpm SHA-256: 9378c0172be6d04092de078cdab299a22ffa6f925188cebd16b473dcaab048bb
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el9eap.src.rpm SHA-256: c983a37fa23ba3e1cf6cf6de79b78328f2b23dd2c5b5b7a04b1be7b277fe9e5b
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 4ec989b88a957d81c715e2235ce2f4f2dafe30d0d10e3bed3aee8ea9fdb53216
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 18d3254a78a7cd571d3d2b0d29a7ce55521592e09262703a6a807bfb1f7c5f6d
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 0ad9f23fc8915738081a82d53a5c9b246ef3534206ed73c462ea49bf163d1992
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 95040bc2c5527344bf3b6b877a832849f2b2b2eb98bc2256f820fa05d0c00e6c
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 65e819564cb86f0051a8e078899a4581ae0bfefaed5cdd5396d9accf9bd19ff5
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el9eap.src.rpm SHA-256: 8100a5007496dd6e08fe113aacb3c6889d1fdb72d2421e824c7d6ebd7decf9c9
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el9eap.src.rpm SHA-256: 3d5d2f7eaf79d4ae22a2426c1ed16de1a59f5f5815ef019d6509c5b05ae09e19
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el9eap.src.rpm SHA-256: 1c06ccbe8c69a045c0d55acb5e77343f1d610d03cd23446f895300fc11341bda
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: b40a17aeb8fe78326f89371701cba0ec4161883b52149dc7347733a918da1794
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: ba1a6ed6d687181d5b74407c3ecd89e221a06e0f1053ece0a28966f7733ca0d5
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el9eap.src.rpm SHA-256: 9ad1594709a4973de8111928b42a3f684e41c0360ed0a74790487f81d5b6ee22
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el9eap.src.rpm SHA-256: c795e8879535f7f6432588e9414471d05ef5a6860fd97ec98822ee6f9c720439
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el9eap.src.rpm SHA-256: 2799d41df72115c20ac83abb66c5813d54b6fb192c7ce1cbfdcdae5b75b1b556
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 7a8f2c793fc02ae6e591801bb0d15c29249275ed28d90e3150eb16424e75ae1f
eap7-yasson-1.0.11-4.redhat_00002.1.el9eap.src.rpm SHA-256: 22685419670fe88145d9b5fbfb561d830b175bac2af19612938969699dc8d250
x86_64
eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: ae33ee8914ac4013fb39fc76ead82c71eac947e3aa2a5ce6da8f8d0e5a43f1b3
eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 88aa78b61e8c170cd4342cba8a6bd8f48e46d0fd7a5885468f0bc374293bad62
eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 4f7727c91aff169a5f93be1b4fe25423c7cd79e579c4fa664e510aa6f8faab2b
eap7-activemq-artemis-core-client-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 3e7188f741942eca0249dbbf8c996017c1ecb63dab444a8e69b6a79fd656f924
eap7-activemq-artemis-dto-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: f722a737eb273a30fe0d34edc8a1b3abd4c876628ab76d2bc6ff67da9e36a6d3
eap7-activemq-artemis-hornetq-protocol-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 0278f594ff23e87fc204f1c810b596a40442c162baf7c8912b1106da2f8164eb
eap7-activemq-artemis-hqclient-protocol-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: f09cbe6d215e0f9a5a2a3c2abfd8257cfe17ffea432537507e24e8030e6986b9
eap7-activemq-artemis-jdbc-store-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 8f4992368b638a563fd297cf7d28db678e9a22d3cfede3491b1f1811115381c8
eap7-activemq-artemis-jms-client-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 3dea66ef4196e841064ad8df8a28b59c8b824ddf25f1706fa1f3e23061fdbd27
eap7-activemq-artemis-jms-server-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: dc37b0c9fddb2085c043d1191e26078a8813b603d97c30acd9b7c6db63ecc39c
eap7-activemq-artemis-journal-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 7b23aa9a002caec154e39ad2cc46dc9c4a75824a3601cd4f2d262c64b004c2ef
eap7-activemq-artemis-ra-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 402f3ef670cde51338b50d909d3aff90d9c18372ac88a5bcf2b306f14506ca1e
eap7-activemq-artemis-selector-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 70b14dff64358adea01581d001b09a792c4449425f04c5e5a628b5c73efcd683
eap7-activemq-artemis-server-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: b57c3d2f108c6c16a97a703ba9cebb4cc0e02a804423afebc5e91ea0adf732d4
eap7-activemq-artemis-service-extensions-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 12c63d65facf340acf8bcaf5b7c7307f315b13b214227ab1ff433d7778fe3c67
eap7-activemq-artemis-tools-2.16.0-17.redhat_00051.1.el9eap.noarch.rpm SHA-256: 1736af3a770e496e110ba23923642a6b070e6a412c9033681bc62fc7a77982d9
eap7-apache-sshd-2.9.3-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 05667f705dbcaff9887657e0930213e6a00d9d35a29990a4be094e8d0a1dcefd
eap7-avro-1.11.3-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 244b236be5bc079cfc817f36a7fab577b7be0ed21e701e54001155765587a3ff
eap7-guava-32.1.1-2.jre_redhat_00001.1.el9eap.noarch.rpm SHA-256: 9e6d13d0d4ce5d7fe251d9e2f6c92fd9050b4d309a620de2ed631793cdcf8d64
eap7-guava-libraries-32.1.1-2.jre_redhat_00001.1.el9eap.noarch.rpm SHA-256: 20faea9a6f9ef848bab386c037fe635c287d68d55ca47f1ffbfe802c8849598f
eap7-hal-console-3.3.20-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: b8205123066e4b497d47ee594002ab84110d8d3932dbdb9bb07b8d518a58941a
eap7-hibernate-5.3.32-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d7b9550cc7d673b6220f5a761c3856cceef4d44509c28208316ca1b5a0d9bbac
eap7-hibernate-core-5.3.32-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: fa525676dd4c3c830b15aaee609cffd38a1b0392dd6b18a48141cef64d0e2c3f
eap7-hibernate-envers-5.3.32-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d4c1063ea081676deb9a8e1b8dc29f602e1304ddd95cb00edee0f8ccba197d18
eap7-infinispan-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 730a89e79c77ff9e5525b25f0ddade5725c59200671eb442c7d3b74829cb51db
eap7-infinispan-cachestore-jdbc-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 5b04e56d0f3dca7ab7230271cc682743499a8d9b854243b1d88e5c279e76c565
eap7-infinispan-cachestore-remote-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 50d4965237822a3610298fe6a31beda1604aa2051422032bd254aa3220abe860
eap7-infinispan-client-hotrod-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: b49b2f8cbf209ac9f061bae227ee0293176b09bf8297534d4517afa1b09db725
eap7-infinispan-commons-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 59be11fda3b48f79cffee792a1787479fae51c952bb08ce9e3aea7223e8f9832
eap7-infinispan-component-annotations-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 1fd7123320524d81c0b64441316929e2c352a87b5fadbfcbc9af774c49fed8f3
eap7-infinispan-core-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 71c7c813f5cb9f80c13898d7e450a2710a2523b2224df3b8bd6b4c4f42af4b05
eap7-infinispan-hibernate-cache-commons-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 9ef98d3bc122efb04ec31af2d02f1770914e929968ab8fcef1a98674d60ffc9e
eap7-infinispan-hibernate-cache-spi-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 75b4abb7de0704dcfaeaa1dc391105d14b5929aa749655ce516cc5583c9dab11
eap7-infinispan-hibernate-cache-v53-11.0.18-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 5c520ba0891be7c2f83032a155c2c3b1e33b475181b3440c0341d46d651c026b
eap7-jandex-2.4.4-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 0056f062edb5e10acdecdda8b00166aa214034c5c0a8be0cac44e5e80982cc28
eap7-jboss-jsp-api_2.3_spec-2.0.1-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: ba3a9dd05d7119ba73e77238e53e51f5408cbf7725a4aa1751bdf5a2f557a3a4
eap7-jboss-marshalling-2.0.14-1.SP1_redhat_00001.1.el9eap.noarch.rpm SHA-256: 6a8566d7b9dd79fd5c6ee1f0b0424439166534565a618a66ad875cd0996b325d
eap7-jboss-marshalling-river-2.0.14-1.SP1_redhat_00001.1.el9eap.noarch.rpm SHA-256: df2e6b8e153e876f3dafb9c3ea2ebe40135643d1f78f545ebab2df69f704ad34
eap7-jboss-server-migration-1.10.0-33.Final_redhat_00032.1.el9eap.noarch.rpm SHA-256: ef3b5571ca7b249387e29a0a39ca4a0e70de6c75ef32d8b31d9cec9fdd4b9fcc
eap7-jboss-server-migration-cli-1.10.0-33.Final_redhat_00032.1.el9eap.noarch.rpm SHA-256: ea94b1f32deb6050b0650fdaf8f796e00cf1b0874d12bbb988996234cb664161
eap7-jboss-server-migration-core-1.10.0-33.Final_redhat_00032.1.el9eap.noarch.rpm SHA-256: b41c002503dfaceea3454d017a72e053fbf2f2867caca5c90fe1bad47f52af68
eap7-jboss-xnio-base-3.8.11-1.SP1_redhat_00001.1.el9eap.noarch.rpm SHA-256: e8c69a348bdd71f0e47bb0318b87628bd54f30d6c8e30c9c4f3ac6de8e96da16
eap7-jbossws-cxf-5.4.9-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 69c091138fdcd02c782308147ca45e30273b7f0a169e9bc881fd31c342377603
eap7-jgroups-4.2.23-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: e3796c414b033bdb4dfd9b49f88a6b3b27b8deb1830da78ce6ec4e9f501198b0
eap7-undertow-2.2.28-1.SP1_redhat_00001.1.el9eap.noarch.rpm SHA-256: 2c07e588927f7afb8f937c93e971d42c7bc452aa47f5503c89d98d65bfe5720e
eap7-weld-core-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 53ee59af10d68c409cbbf6830e751811c57a41b80448e1fddf800dd7625a5ab4
eap7-weld-core-impl-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 56c0e09f32fcada6d248ddeaa5a43c68cc2114ba25aa7a898af87035ff1d50d0
eap7-weld-core-jsf-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 30d169435918996987a3cf5dba61e88f5bfecbccb34eaffc7de301a6368576fc
eap7-weld-ejb-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: fba54b7a28b25ae83e5345c12b2da55f43a6279b67540fcde8ea73be1736e940
eap7-weld-jta-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 233c5b9b225cb825c6d5401cdfcab3f7c97e2deb87451e4723881333157030f6
eap7-weld-probe-core-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 49b8fe7c6c2aaaf347af9bdc8b9dad4903e910f7c244b8622b508daa39f567fb
eap7-weld-web-3.1.10-2.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 0218a80c62e2b127aae92b7655fce33342abdd870df2db92d548c7afa03e7832
eap7-wildfly-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: e3caaab719a0854565116bbaad52c4f832c1227a5aa0bdcccae59b056edae183
eap7-wildfly-java-jdk11-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: 4f963dd31e97779525d326dd94d2f33b4940fbf2bd339b52940feafa938bd798
eap7-wildfly-java-jdk17-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: ee02946ff2e5ea472dceb4d42e9e7eb822e44b65970333904cce452831c7b87b
eap7-wildfly-java-jdk8-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: d46622e836f51de36d78875b549f005c5e110f165613803589201e9e8d2377d6
eap7-wildfly-javadocs-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: e509ef930c820156334b0637f4dd0fa3cb41cc7f1c0c69218b566ee1d42022ae
eap7-wildfly-modules-7.4.14-5.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: e8de94eb47b7258f1ca1281e553705caca74d9bf8a523139993e32b37d5431cb
eap7-wildfly-transaction-client-1.1.16-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d51ae732d1eb3a84260d759ae0ee911aad532442b065d0cc9476799a90924102
eap7-yasson-1.0.11-4.redhat_00002.1.el9eap.noarch.rpm SHA-256: 350b8814654e4965ce6dbd4eb3acf9305754128565df6716c58dfbba723a5292

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.