{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "A security update is now available for Red Hat JBoss Enterprise Application\nPlatform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated\nthis update as having a security impact of Important. A Common Vulnerability\nScoring System (CVSS) base score, which gives a detailed severity rating, is\navailable for each vulnerability from the CVE link(s) in the References section.", "title" : "Topic" }, { "category" : "general", "text" : "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.25 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.24, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.25 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* netty-codec-redis: Netty: Denial of Service via malicious Redis array header (CVE-2026-50011)\n\n* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n\n* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays (CVE-2026-44250)\n\n* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads (CVE-2026-44890)\n\n* netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments (CVE-2026-46340)\n\n* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n\n* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)\n\n* netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator (CVE-2026-48006)\n\n* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n\n* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)\n\n* netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)\n\n* netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)\n\n* netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing (CVE-2026-42585)\n\n* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)\n\n* netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)\n\n* netty-codec-http: Netty: HTTP request smuggling via URI manipulation and CRLF injection (CVE-2026-41417)\n\n* netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)\n\n* netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)\n\n* netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)\n\n* netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)\n\n* picketlink-federation: auth bypass in Picketlink SAML unsolicited-response (CVE-2026-10579)\n\n* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)\n\n* bcprov-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)\n\n* bcprov-jdk15: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)\n\n* bcprov-jdk12: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)\n\n* bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)\n\n* bcpg-jdk15on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)\n\n* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)\n\n* bcpkix-jdk15on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)\n\n* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)\n\n* bcprov-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)\n\n* bcprov-jdk15: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)\n\n* bcprov-jdk12: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)\n\n* bcprov-jdk15: private key leakage via non-constant time comparisons (CVE-2026-5598)\n\n* bcprov-jdk12: private key leakage via non-constant time comparisons (CVE-2026-5598)\n\n* artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication (CVE-2026-27446)\n\n* undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery (CVE-2026-15554)\n\n* wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller (CVE-2026-15555)\n\n* picketlink-federation: picketlink SAML 2.0 auth bypass via missing assertions (CVE-2026-15556)\n\n* openjdk-orb: unauthed class loading via IIOP in EAP (CVE-2026-15560)\n\n* undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow (CVE-2026-15561)\n\n* jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service (CVE-2026-15562)\n\n* wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS (CVE-2026-15563)\n\n* jsf-impl: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include (CVE-2026-46581)\n\n* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n\n* jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:53644", "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/#important", "url" : "https://access.redhat.com/security/updates/classification/#important" }, { "category" : "external", "summary" : "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4", "url" : "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4" }, { "category" : "external", "summary" : "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index", "url" : "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index" }, { "category" : "external", "summary" : "2444320", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444320" }, { "category" : "external", "summary" : "2458634", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458634" }, { "category" : "external", "summary" : "2458635", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458635" }, { "category" : "external", "summary" : "2458638", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458638" }, { "category" : "external", "summary" : "2458640", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458640" }, { "category" : "external", "summary" : "2458641", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458641" }, { "category" : "external", "summary" : "2467540", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467540" }, { "category" : "external", "summary" : "2477217", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477217" }, { "category" : "external", "summary" : "2477220", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477220" }, { "category" : "external", "summary" : "2477224", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477224" }, { "category" : "external", "summary" : "2477226", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477226" }, { "category" : "external", "summary" : "2477227", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477227" }, { "category" : "external", "summary" : "2477232", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477232" }, { "category" : "external", "summary" : "2477930", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477930" }, { "category" : "external", "summary" : "2480325", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480325" }, { "category" : "external", "summary" : "2480601", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480601" }, { "category" : "external", "summary" : "2480637", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480637" }, { "category" : "external", "summary" : "2482963", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482963" }, { "category" : "external", "summary" : "2482965", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482965" }, { "category" : "external", "summary" : "2483121", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483121" }, { "category" : "external", "summary" : "2483131", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483131" }, { "category" : "external", "summary" : "2483133", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483133" }, { "category" : "external", "summary" : "2483135", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483135" }, { "category" : "external", "summary" : "2483136", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483136" }, { "category" : "external", "summary" : "2483138", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483138" }, { "category" : "external", "summary" : "2488053", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488053" }, { "category" : "external", "summary" : "2488062", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488062" }, { "category" : "external", "summary" : "2488081", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488081" }, { "category" : "external", "summary" : "2488383", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488383" }, { "category" : "external", "summary" : "2488388", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488388" }, { "category" : "external", "summary" : "2488391", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488391" }, { "category" : "external", "summary" : "2488400", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488400" }, { "category" : "external", "summary" : "2488413", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488413" }, { "category" : "external", "summary" : "2488429", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488429" }, { "category" : "external", "summary" : "2488433", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488433" }, { "category" : "external", "summary" : "2488437", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488437" }, { "category" : "external", "summary" : "2488439", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488439" }, { "category" : "external", "summary" : "2488442", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488442" }, { "category" : "external", "summary" : "2511026", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2511026" }, { "category" : "external", "summary" : "JBEAP-33515", "url" : "https://issues.redhat.com/browse/JBEAP-33515" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53644.json" } ], "title" : "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate", "tracking" : { "current_release_date" : "2026-08-27T16:00:05+00:00", "generator" : { "date" : "2026-08-27T16:00:05+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "5.3.16" } }, "id" : "RHSA-2026:53644", "initial_release_date" : "2026-08-11T16:39:22+00:00", "revision_history" : [ { "date" : "2026-08-11T16:39:22+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-08-11T16:39:22+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-08-27T16:00:05+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product" : { "name" : "Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7" } } } ], "category" : "product_family", "name" : "Red Hat JBoss Enterprise Application Platform" }, { "branches" : [ { "category" : "product_version", "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "product_id" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar@1.5.26-2.Final_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "product" : { "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "product_id" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-30.SP12_redhat_00020.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "product_id" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-remoting@5.0.31-3.SP2_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "product" : { "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "product_id" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-46.Final_redhat_00044.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "product" : { "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "product_id" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "product_id" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-undertow@2.2.40-2.SP3_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-databind@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product_id" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-modules-java8@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-annotations@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "product" : { "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "product_id" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-22.redhat_00057.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-modules-base@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "product_id" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.14-11.SP11_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product_id" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty@4.1.135-1.Final_redhat_00001.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-core@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "product" : { "name" : "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_id" : "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-jaxrs-providers@2.18.8-1.redhat_00003.1.el7eap?arch=src" } } }, { "category" : "product_version", "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "product" : { "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "product_id" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly@7.4.25-2.GA_redhat_00001.1.el7eap?arch=src" } } } ], "category" : "architecture", "name" : "src" }, { "branches" : [ { "category" : "product_version", "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-ironjacamar-validator@1.5.26-2.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product_id" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-bindings@2.5.5-30.SP12_redhat_00020.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product_id" : "eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-wildfly8@2.5.5-30.SP12_redhat_00020.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-remoting@5.0.31-3.SP2_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product" : { "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_id" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-server-migration@1.10.0-46.Final_redhat_00044.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product" : { "name" : "eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_id" : "eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.10.0-46.Final_redhat_00044.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product" : { "name" : "eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_id" : "eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.10.0-46.Final_redhat_00044.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-api@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-common@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-config@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-federation@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-idm-api@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-idm-impl@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-idm-simple-schema@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product" : { "name" : "eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_id" : "eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-picketlink-impl@2.5.5-24.SP12_redhat_00016.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-undertow@2.2.40-2.SP3_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-databind@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-datatype-jdk8@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-datatype-jsr310@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-modules-java8@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-annotations@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-cli@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-commons@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-core-client@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-dto@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-jms-client@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-jms-server@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-journal@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-ra@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-selector@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-server@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-service-extensions@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product" : { "name" : "eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_id" : "eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-activemq-artemis-tools@2.16.0-22.redhat_00057.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-module-jaxb-annotations@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-modules-base@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-glassfish-jsf@2.3.14-11.SP11_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-all@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-buffer@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-dns@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-haproxy@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-http@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-http2@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-memcache@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-mqtt@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-redis@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-smtp@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-socks@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-stomp@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-codec-xml@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-common@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-handler@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-handler-proxy@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-resolver@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-resolver-dns@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-resolver-dns-classes-macos@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-classes-epoll@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-classes-kqueue@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-native-unix-common@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-sctp@4.1.135-1.Final_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-core@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-jaxrs-base@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product" : { "name" : "eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_id" : "eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-jackson-jaxrs-json-provider@2.18.8-1.redhat_00003.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly@7.4.25-2.GA_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly-java-jdk11@7.4.25-2.GA_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly-java-jdk8@7.4.25-2.GA_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly-javadocs@7.4.25-2.GA_redhat_00001.1.el7eap?arch=noarch" } } }, { "category" : "product_version", "name" : "eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product" : { "name" : "eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_id" : "eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-wildfly-modules@7.4.25-2.GA_redhat_00001.1.el7eap?arch=noarch" } } } ], "category" : "architecture", "name" : "noarch" }, { "branches" : [ { "category" : "product_version", "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product" : { "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product_id" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el7eap?arch=x86_64" } } }, { "category" : "product_version", "name" : "eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product" : { "name" : "eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product_id" : "eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/eap7-netty-transport-native-epoll-debuginfo@4.1.135-1.Final_redhat_00001.1.el7eap?arch=x86_64" } } } ], "category" : "architecture", "name" : "x86_64" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src" }, "product_reference" : "eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch" }, "product_reference" : "eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch" }, "product_reference" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src" }, "product_reference" : "eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch" }, "product_reference" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src" }, "product_reference" : "eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch" }, "product_reference" : "eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch" }, "product_reference" : "eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64 as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64" }, "product_reference" : "eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64 as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64" }, "product_reference" : "eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src" }, "product_reference" : "eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src" }, "product_reference" : "eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch" }, "product_reference" : "eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src" }, "product_reference" : "eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server", "product_id" : "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" }, "product_reference" : "eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "relates_to_product_reference" : "7Server-JBEAP-7.4-ELS" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2025-14813", "cwe" : { "id" : "CWE-327", "name" : "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date" : "2026-04-15T10:01:27.769752+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458640" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `GOSTCTR` implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the `G3413CTRBlockCipher`, potentially leading to the recovery and access of encrypted data.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this flaw, an attacker needs to capture ciphertext encrypted by the `GOSTCTR` implementation where the `G3413CTRBlockCipher` processed more than 255 blocks of data, resulting in keystream reuse. An attack typically requires capturing these overlapping ciphertexts to perform cryptanalysis and uncover the underlying data.\nThe primary impact of this vulnerability is the potential loss of confidentiality for data encrypted by the `GOSTCTR` implementation. This can compromise encrypted communications or sensitive stored data by allowing an attacker to fully recover the plaintext.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2025-14813" }, { "category" : "external", "summary" : "RHBZ#2458640", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458640" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-14813", "url" : "https://www.cve.org/CVERecord?id=CVE-2025-14813" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-14813", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-14813" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813", "url" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813" } ], "release_date" : "2026-04-15T08:56:34.057000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this vulnerability, strictly limit the payload encrypted under a single key and Initialization Vector (IV) pair using the GOSTCTR implementation and G3413CTRBlockCipher to a maximum of 255 blocks. Alternatively, transition to a more secure, standardized and authenticated encryption mode.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly" }, { "cve" : "CVE-2026-0636", "cwe" : { "id" : "CWE-90", "name" : "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')" }, "discovery_date" : "2026-04-15T10:01:32.911938+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458641" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `LDAPStoreHelper` implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying crafted input, potentially leading to disclosure of sensitive information or the manipulation of directory search queries.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an attacker needs to submit crafted input to an application using the `LDAPStoreHelper` implementation for directory queries. An attack typically requires the application to pass the malicious input directly into a search filter, allowing the attacker to modify the resulting LDAP query.\nThe primary impact of this vulnerability is the loss of confidentiality and integrity for directory data. This can allow an attacker to bypass search restrictions and manipulate directory results, potentially leading to unauthorized access or privilege escalation.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-0636" }, { "category" : "external", "summary" : "RHBZ#2458641", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458641" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-0636", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-0636" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-0636", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-0636" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde", "url" : "https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636", "url" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636" } ], "release_date" : "2026-04-15T08:59:12.677000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this flaw, sanitize all user-supplied input to remove or escape LDAP special characters before passing it to the LDAPStoreHelper for directory queries. If the input contains unexpected metacharacters such as asterisks, parentheses or backslashes, reject the request or escape the characters.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java" }, { "cve" : "CVE-2026-3505", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-04-15T10:01:17.415497+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458638" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD (Authenticated Encryption with Associated Data) message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory exhaustion in a JVM, resulting in a denial of service.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an attacker needs to submit a specially crafted PGP AEAD message containing an unbounded chunk size to an application. An attack typically requires the application to process this malformed data, resulting in the uncontrolled allocation of memory resources.\nThe primary impact of this vulnerability is a compromise of system availability, allowing an unauthenticated remote attacker to cause memory exhaustion in a JVM, resulting in a denial of service.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-3505" }, { "category" : "external", "summary" : "RHBZ#2458638", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458638" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-3505", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-3505" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3505", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-3505" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505", "url" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505" } ], "release_date" : "2026-04-15T09:06:37.939000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this vulnerability, enforce payload size limits on all incoming PGP messages before processing them. Additionally, apply memory quotas to the JVM or container environment to prevent a complete system outage in the event of memory exhaustion.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion" }, { "cve" : "CVE-2026-5588", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-04-15T10:00:59.672015+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458634" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft `CompositeVerifier` implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially compromising the authenticity and integrity of data.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an attacker needs to submit a crafted payload or token containing an empty signature sequence to an application using the `CompositeVerifier` for cryptographic validation. An attack typically requires the application to process this malformed data and improperly accept the empty sequence as a valid signature, bypassing standard verification checks.\nThe primary impact of this vulnerability is the compromise of data authenticity and integrity, allowing an attacker to forge digital signatures and impersonate trusted entities.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-5588" }, { "category" : "external", "summary" : "RHBZ#2458634", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458634" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5588", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5588" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5588", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5588" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588", "url" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588" } ], "release_date" : "2026-04-15T09:06:15.617000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this flaw, check that the signature sequence is not empty before passing any data to the CompositeVerifier for cryptographic validation. If the sequence is empty or null, explicitly reject the payload before it is processed.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid" }, { "cve" : "CVE-2026-5598", "cwe" : { "id" : "CWE-385", "name" : "Covert Timing Channel" }, "discovery_date" : "2026-04-15T10:01:04.531185+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458635" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy to gain unauthorized access to sensitive cryptographic information.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an unauthenticated attacker needs to send highly specific, malformed ciphertexts to the target server. These payloads are used to interact with the private key of the server in a way that the vulnerable, non-constant time code paths are triggered during the verification step. An attack typically requires sending a large volume of these requests to perform statistical analysis on the resulting timing variations, increasing its complexity.\nThe primary security impact of this vulnerability is the potential leakage of private keys associated with the FrodoKEM implementation. This can compromise encrypted communications or authentication mechanisms.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-5598" }, { "category" : "external", "summary" : "RHBZ#2458635", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458635" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-5598", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-5598" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5598", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-5598" }, { "category" : "external", "summary" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998", "url" : "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998" } ], "release_date" : "2026-04-15T09:05:56.277000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this vulnerability, implement aggressive rate limiting and anomaly detection, specifically looking for unusual, high-frequency cryptographic handshake failures or anomalous traffic patterns targeting endpoints that handle key exchanges in the network logs.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons" }, { "cve" : "CVE-2026-10579", "discovery_date" : "2026-05-20T22:49:02.313000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2480325" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted operations, or other flaws.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "picketlink-federation: auth bypass in Picketlink SAML unsolicited-response", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-10579" }, { "category" : "external", "summary" : "RHBZ#2480325", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480325" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-10579", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-10579" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10579", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-10579" } ], "release_date" : "2026-08-11T05:48:48.345000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Critical" } ], "title" : "picketlink-federation: auth bypass in Picketlink SAML unsolicited-response" }, { "cve" : "CVE-2026-15554", "cwe" : { "id" : "CWE-295", "name" : "Improper Certificate Validation" }, "discovery_date" : "2026-05-21T19:34:31.218000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2480601" } ], "notes" : [ { "category" : "description", "text" : "the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP protocol.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15554" }, { "category" : "external", "summary" : "RHBZ#2480601", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480601" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15554", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15554" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15554", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15554" } ], "release_date" : "2026-08-11T05:49:31.658000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery" }, { "cve" : "CVE-2026-15555", "cwe" : { "id" : "CWE-502", "name" : "Deserialization of Untrusted Data" }, "discovery_date" : "2026-05-21T20:47:36.888000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2480637" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15555" }, { "category" : "external", "summary" : "RHBZ#2480637", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2480637" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15555", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15555" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15555", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15555" } ], "release_date" : "2026-08-11T05:49:54.473000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "ADJACENT_NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller" }, { "cve" : "CVE-2026-15556", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-05-28T23:46:02.407000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483121" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "picketlink-federation: picketlink SAML 2.0 auth bypass via missing assertions", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Red Hat JBoss EAP 8.x is not affected. The vulnerable components (`picketlink-federation`, `picketlink-common`) are not shipped in EAP 8.x. The `org/picketlink/` module path does not exist. The only PicketLink-related artifact in EAP 8.1 is `wildfly-picketlink-8.1.1.GA-redhat-00012.jar` — a WildFly subsystem extension that provides the `migrate` CLI operation for EAP 7→8 upgrades. This JAR contains no SAML processing code, no signature validation logic, and has no module dependency on `org.picketlink.federation`. The PicketLink SAML SP code path is entirely absent from EAP 8.x.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15556" }, { "category" : "external", "summary" : "RHBZ#2483121", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483121" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15556", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15556" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15556", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15556" } ], "release_date" : "2026-08-11T05:54:53.908000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 8.1, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "picketlink-federation: picketlink SAML 2.0 auth bypass via missing assertions" }, { "cve" : "CVE-2026-15560", "cwe" : { "id" : "CWE-829", "name" : "Inclusion of Functionality from Untrusted Control Sphere" }, "discovery_date" : "2026-05-29T00:23:22.856000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483131" } ], "notes" : [ { "category" : "description", "text" : "when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openjdk-orb: unauthed class loading via IIOP in EAP", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15560" }, { "category" : "external", "summary" : "RHBZ#2483131", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483131" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15560", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15560" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15560", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15560" } ], "release_date" : "2026-08-11T05:52:32.653000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "openjdk-orb: unauthed class loading via IIOP in EAP" }, { "cve" : "CVE-2026-15561", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-05-29T00:41:31.600000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483133" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15561" }, { "category" : "external", "summary" : "RHBZ#2483133", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483133" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15561", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15561" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15561", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15561" } ], "release_date" : "2026-08-11T05:52:49.718000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow" }, { "cve" : "CVE-2026-15562", "cwe" : { "id" : "CWE-190", "name" : "Integer Overflow or Wraparound" }, "discovery_date" : "2026-05-29T00:52:03.986000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483135" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in jboss-remoting affecting Red Hat JBoss Enterprise Application Platform. A remote, unauthenticated attacker can exploit an integer overflow in the MessageReader by completing a jboss-remoting handshake on exposed ports, leading to a severe degradation of server performance and potential resource exhaustion.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15562" }, { "category" : "external", "summary" : "RHBZ#2483135", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483135" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15562", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15562" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15562", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15562" } ], "release_date" : "2026-08-11T05:53:34.782000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service" }, { "cve" : "CVE-2026-15563", "cwe" : { "id" : "CWE-306", "name" : "Missing Authentication for Critical Function" }, "discovery_date" : "2026-05-29T01:18:12.701000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483138" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-15563" }, { "category" : "external", "summary" : "RHBZ#2483138", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483138" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-15563", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-15563" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15563", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-15563" } ], "release_date" : "2026-08-11T05:54:01.358000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS" }, { "cve" : "CVE-2026-27446", "cwe" : { "id" : "CWE-306", "name" : "Missing Authentication for Critical Function" }, "discovery_date" : "2026-03-04T07:02:26.064000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2444320" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. The primary consequence is the potential for message injection into any queue and/or message exfiltration from any queue via the rogue broker.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Red Hat rates this flaw as IMPORTANT severity because it does not enable remote code execution or system compromise (arbitrary code execution), which is Red Hat's threshold for Critical impact. Its impact is limited to message injection and exfiltration via rogue broker federation. Exploitation requires the broker to accept inbound Core protocol connections from untrusted networks with outbound connectivity to attacker-controlled systems. Availability impact is set to None as exploitation does not cause service disruption or broker instability.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-27446" }, { "category" : "external", "summary" : "RHBZ#2444320", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2444320" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-27446", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-27446" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-27446", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-27446" }, { "category" : "external", "summary" : "https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg", "url" : "https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg" } ], "release_date" : "2026-03-04T06:06:00+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this issue, restrict Core protocol support on acceptors receiving connections from untrusted sources. The default \"artemis\" acceptor on port 61616 supports all protocols, including Core. Modify the acceptor URL to explicitly exclude the Core protocol using the \"protocols\" URL parameter. Alternatively, configure two-way SSL with certificate-based authentication to prevent unauthenticated exploitation. A service restart or reload may be required for changes to take effect.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 9.1, "baseSeverity" : "CRITICAL", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication" }, { "cve" : "CVE-2026-41417", "cwe" : { "id" : "CWE-93", "name" : "Improper Neutralization of CRLF Sequences ('CRLF Injection')" }, "discovery_date" : "2026-05-06T22:00:55.777954+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2467540" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty. A remote attacker can bypass request-line validation by manipulating the URI after a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created. This vulnerability, a form of Carriage Return Line Feed (CRLF) injection, allows for the insertion of additional HTTP or RTSP requests. The primary consequence is HTTP request smuggling or desynchronization, which can lead to unauthorized access or manipulation of web traffic.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-41417" }, { "category" : "external", "summary" : "RHBZ#2467540", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467540" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-41417", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-41417" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-41417", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-41417" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv", "url" : "https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv" } ], "release_date" : "2026-05-06T20:52:47.206000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection" }, { "cve" : "CVE-2026-42578", "cwe" : { "id" : "CWE-93", "name" : "Improper Neutralization of CRLF Sequences ('CRLF Injection')" }, "discovery_date" : "2026-05-13T19:02:00.826936+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477226" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Important: This vulnerability in Netty's HttpProxyHandler allows for HTTP header injection into CONNECT requests when an attacker can influence outbound headers. The handler's explicit disabling of header validation could enable proxy-related attacks, such as cache poisoning or bypassing security controls, impacting applications utilizing this component.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42578" }, { "category" : "external", "summary" : "RHBZ#2477226", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477226" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42578", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42578" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42578", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42578" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr", "url" : "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr" } ], "release_date" : "2026-05-13T17:57:43.538000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Applications utilizing Netty's HttpProxyHandler must ensure that any user-controlled input used to populate outbound headers is rigorously sanitized to prevent CRLF injection. If comprehensive input sanitization cannot be implemented, restricting network access to the application that uses the HttpProxyHandler can reduce the attack surface.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation" }, { "cve" : "CVE-2026-42579", "cwe" : { "id" : "CWE-1286", "name" : "Improper Validation of Syntactic Correctness of Input" }, "discovery_date" : "2026-05-13T19:01:25.062732+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477217" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty. Netty's DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important integrity flaw in Netty's DNS codec. The vulnerability arises from insufficient enforcement of RFC 1035 domain name constraints during both encoding and decoding, allowing remote attackers to manipulate DNS responses or user-controlled hostnames. This could lead to a high integrity impact on affected Red Hat products that utilize the vulnerable Netty DNS codec.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42579" }, { "category" : "external", "summary" : "RHBZ#2477217", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477217" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42579", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42579" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42579", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42579" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm", "url" : "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm" } ], "release_date" : "2026-05-13T18:01:52.500000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement" }, { "cve" : "CVE-2026-42581", "cwe" : { "id" : "CWE-444", "name" : "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "discovery_date" : "2026-05-13T19:02:26.404511+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477232" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important flaw. Netty's HttpObjectDecoder, used across various Red Hat products, improperly handles conflicting `Transfer-Encoding: chunked` and `Content-Length` headers in HTTP/1.0 requests. This allows a remote attacker to perform HTTP request smuggling, potentially bypassing security controls or gaining unauthorized access to information due to misinterpretation of message boundaries by downstream proxies or handlers.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42581" }, { "category" : "external", "summary" : "RHBZ#2477232", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477232" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42581", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42581" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42581", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42581" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9", "url" : "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9" } ], "release_date" : "2026-05-13T17:54:44.492000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this issue, configure any reverse proxies or load balancers in front of Netty to either reject HTTP/1.0 requests containing both Transfer-Encoding: chunked and Content-Length headers, or to explicitly prioritize the Transfer-Encoding header over Content-Length for HTTP/1.0 traffic. This ensures consistent interpretation of message boundaries and prevents request smuggling attacks.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.2, "baseSeverity" : "HIGH", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers" }, { "cve" : "CVE-2026-42584", "cwe" : { "id" : "CWE-444", "name" : "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "discovery_date" : "2026-05-13T19:01:51.846351+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477224" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Important: A flaw in Netty's HttpClientCodec allows a remote attacker to cause data confusion. By sending a specially crafted sequence of HTTP responses, an attacker can cause subsequent HTTP responses to be parsed incorrectly, potentially leading to information disclosure or data integrity issues in applications utilizing Netty for HTTP client operations. This vulnerability affects various Red Hat products that bundle Netty, including Red Hat AMQ, Enterprise Application Platform, Red Hat Build of Quarkus, and Red Hat Build of Keycloak.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42584" }, { "category" : "external", "summary" : "RHBZ#2477224", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477224" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42584", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42584" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42584", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42584" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3", "url" : "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3" } ], "release_date" : "2026-05-13T18:10:48.437000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 7.3, "baseSeverity" : "HIGH", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion" }, { "cve" : "CVE-2026-42585", "cwe" : { "id" : "CWE-444", "name" : "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "discovery_date" : "2026-05-13T19:02:06.067565+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477227" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate web traffic.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This Moderate flaw in Netty's HTTP codec allows for request smuggling attacks due to improper parsing of malformed Transfer-Encoding headers. An attacker could exploit this to bypass security controls, potentially leading to unauthorized access to sensitive information or manipulation of web traffic in Red Hat products utilizing affected Netty versions, particularly when deployed behind a proxy or load balancer.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42585" }, { "category" : "external", "summary" : "RHBZ#2477227", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477227" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42585", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42585" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42585", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42585" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv", "url" : "https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv" } ], "release_date" : "2026-05-13T18:12:39.586000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing" }, { "cve" : "CVE-2026-42587", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-05-13T19:01:35.415881+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2477220" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in Netty's HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-42587" }, { "category" : "external", "summary" : "RHBZ#2477220", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2477220" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-42587", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-42587" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42587", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-42587" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv", "url" : "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv" } ], "release_date" : "2026-05-13T18:22:21.699000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression" }, { "cve" : "CVE-2026-44249", "cwe" : { "id" : "CWE-1287", "name" : "Improper Validation of Specified Type of Input" }, "discovery_date" : "2026-06-11T22:02:05.327173+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488081" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-44249" }, { "category" : "external", "summary" : "RHBZ#2488081", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488081" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-44249", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-44249" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44249", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44249" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86", "url" : "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86" } ], "release_date" : "2026-06-11T20:46:14.110000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation" }, { "cve" : "CVE-2026-44250", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-06-11T22:01:16.373607+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488062" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion. Consequently, this can result in a Denial of Service (DoS) condition, rendering the affected server unresponsive.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in netty-codec-redis, affecting Red Hat products that process Redis payloads. A remote attacker can exhaust server memory by sending a crafted Redis payload with deeply nested arrays, leading to an OutOfMemoryError and rendering the service unresponsive. This impact is significant due to the potential for complete service disruption without authentication.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-44250" }, { "category" : "external", "summary" : "RHBZ#2488062", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488062" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-44250", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-44250" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44250", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44250" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2", "url" : "https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2" } ], "release_date" : "2026-06-11T20:49:00.487000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this issue, restrict network access to services utilizing netty-codec-redis to trusted clients and networks only. Implement firewall rules to limit exposure of the Redis service or the application using it to prevent unauthenticated remote attackers from sending malicious payloads. This may impact legitimate client connections if not configured carefully. A service restart may be required for firewall rule changes to take effect.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays" }, { "cve" : "CVE-2026-44890", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-06-11T22:00:53.322242+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488053" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service (DoS) condition where legitimate connections cannot be processed.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This flaw is rated as Important as it allows a remote, unauthenticated attacker to cause a denial of service in applications utilizing `netty-codec-redis` or `netty-handler`. By sending specially crafted Redis payloads without proper termination, an attacker can exhaust the server's direct memory pool, preventing legitimate connections and disrupting service availability. This impacts Red Hat products that process Redis traffic via affected Netty components.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-44890" }, { "category" : "external", "summary" : "RHBZ#2488053", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488053" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-44890", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-44890" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44890", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44890" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3", "url" : "https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3" } ], "release_date" : "2026-06-11T20:52:50.980000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads" }, { "cve" : "CVE-2026-44893", "cwe" : { "id" : "CWE-805", "name" : "Buffer Access with Incorrect Length Value" }, "discovery_date" : "2026-06-12T15:01:18.066312+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488383" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-44893" }, { "category" : "external", "summary" : "RHBZ#2488383", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488383" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-44893", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-44893" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44893", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-44893" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv", "url" : "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv" } ], "release_date" : "2026-06-12T14:00:25.801000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message" }, { "cve" : "CVE-2026-45416", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-06-12T15:01:45.671884+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488391" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-45416" }, { "category" : "external", "summary" : "RHBZ#2488391", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488391" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-45416", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-45416" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-45416", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-45416" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh", "url" : "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh" } ], "release_date" : "2026-06-12T14:10:05.585000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this issue, configure applications utilizing Netty's `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application's documentation for details on configuring Netty's TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake" }, { "cve" : "CVE-2026-45674", "cwe" : { "id" : "CWE-346", "name" : "Origin Validation Error" }, "discovery_date" : "2026-06-12T15:02:15.565158+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488400" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This Important severity flaw in Netty's DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-45674" }, { "category" : "external", "summary" : "RHBZ#2488400", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488400" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-45674", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-45674" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-45674", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-45674" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc", "url" : "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc" } ], "release_date" : "2026-06-12T14:17:50.203000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 8.7, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation" }, { "cve" : "CVE-2026-46340", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-06-12T15:01:34.090215+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488388" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-transport-sctp. A remote attacker can exploit this vulnerability by sending specially crafted, non-complete Stream Control Transmission Protocol (SCTP) message fragments. This can lead to unbounded memory growth within the application, causing a Denial of Service (DoS) condition. The affected component fails to limit the size or number of these fragments, allowing an attacker to consume excessive system resources.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "An Important denial of service flaw exists in `netty-transport-sctp`, a component used across various Red Hat products. A remote, unauthenticated attacker can exploit this vulnerability by sending fragmented Stream Control Transmission Protocol (SCTP) messages without the completion flag. This leads to unbounded memory growth and resource exhaustion, causing a complete denial of service for applications utilizing the affected Netty component.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-46340" }, { "category" : "external", "summary" : "RHBZ#2488388", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488388" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-46340", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-46340" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46340", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46340" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch", "url" : "https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch" } ], "release_date" : "2026-06-12T14:19:48.855000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments" }, { "cve" : "CVE-2026-46581", "cwe" : { "id" : "CWE-94", "name" : "Improper Control of Generation of Code ('Code Injection')" }, "discovery_date" : "2026-05-29T01:09:27.995000+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2483136" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-46581" }, { "category" : "external", "summary" : "RHBZ#2483136", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2483136" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-46581", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-46581" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46581", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46581" } ], "release_date" : "2026-08-06T12:01:27.703000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include" }, { "cve" : "CVE-2026-47691", "cwe" : { "id" : "CWE-346", "name" : "Origin Validation Error" }, "discovery_date" : "2026-06-12T16:02:45.855856+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488439" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This Important flaw in Netty's DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-47691" }, { "category" : "external", "summary" : "RHBZ#2488439", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488439" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-47691", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-47691" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-47691", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-47691" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85", "url" : "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85" } ], "release_date" : "2026-06-12T14:33:16.595000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 8.7, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records" }, { "cve" : "CVE-2026-48006", "cwe" : { "id" : "CWE-772", "name" : "Missing Release of Resource after Effective Lifetime" }, "discovery_date" : "2026-06-12T16:02:27.195680+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488433" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the shared memory pool. Over time, this can exhaust the available memory, causing a Denial of Service (DoS) for all Netty channels in the process.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in Netty's RedisArrayAggregator. Repeated connection churn by a network peer can lead to a permanent leak of direct-memory buffers, eventually exhausting the JVM-wide direct-memory pool. This can cause allocation failures across all Netty channels, impacting the availability and stability of Red Hat products utilizing Netty for Redis communication.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-48006" }, { "category" : "external", "summary" : "RHBZ#2488433", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488433" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-48006", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-48006" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48006", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48006" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm", "url" : "https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm" } ], "release_date" : "2026-06-12T14:36:44.416000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator" }, { "cve" : "CVE-2026-48043", "cwe" : { "id" : "CWE-772", "name" : "Missing Release of Resource after Effective Lifetime" }, "discovery_date" : "2026-06-12T16:02:56.371830+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488442" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-48043" }, { "category" : "external", "summary" : "RHBZ#2488442", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488442" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-48043", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-48043" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48043", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48043" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j", "url" : "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j" } ], "release_date" : "2026-06-12T14:39:52.498000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak" }, { "cve" : "CVE-2026-48059", "cwe" : { "id" : "CWE-1286", "name" : "Improper Validation of Syntactic Correctness of Input" }, "discovery_date" : "2026-06-12T16:02:40.032749+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488437" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-48059" }, { "category" : "external", "summary" : "RHBZ#2488437", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488437" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-48059", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-48059" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48059", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-48059" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j", "url" : "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j" } ], "release_date" : "2026-06-12T14:42:44.677000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers" }, { "cve" : "CVE-2026-50010", "cwe" : { "id" : "CWE-347", "name" : "Improper Verification of Cryptographic Signature" }, "discovery_date" : "2026-06-12T16:02:13.735675+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488429" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-50010" }, { "category" : "external", "summary" : "RHBZ#2488429", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488429" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-50010", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-50010" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-50010", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-50010" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9", "url" : "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9" } ], "release_date" : "2026-06-12T14:50:43.151000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass" }, { "cve" : "CVE-2026-50011", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-06-12T16:01:17.003045+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2488413" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Netty, a network application framework. The RedisArrayAggregator component pre-allocates memory based on the declared element count in a Redis array header. A remote attacker can exploit this by sending a small, malicious Redis array header that claims a huge initial capacity, leading to excessive memory pre-allocation. This can result in a denial of service (DoS) due to resource exhaustion.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "netty-codec-redis: Netty: Denial of Service via malicious Redis array header", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in Netty's RedisArrayAggregator component. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted Redis array header, causing excessive memory pre-allocation and leading to resource exhaustion. This can disrupt services utilizing Netty for Redis communication.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-50011" }, { "category" : "external", "summary" : "RHBZ#2488413", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2488413" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-50011", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-50011" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-50011", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-50011" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final", "url" : "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final" }, { "category" : "external", "summary" : "https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7", "url" : "https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7" } ], "release_date" : "2026-06-12T14:52:18.042000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" }, { "category" : "workaround", "details" : "To mitigate this issue, restrict network access to services that utilize the netty-codec-redis component and process Redis traffic. Configure firewalls or network access control lists (ACLs) to limit connections to these services from trusted networks or localhost only. This reduces the attack surface by preventing untrusted remote attackers from sending malicious Redis array headers. Consult product-specific documentation for detailed instructions on configuring network access for affected Red Hat products. Reloading or restarting services may be required for network configuration changes to take effect, which could temporarily impact availability.", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "netty-codec-redis: Netty: Denial of Service via malicious Redis array header" }, { "cve" : "CVE-2026-68494", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-08-04T15:01:53.631865+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2511026" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is an Important denial of service vulnerability in `jackson-core`'s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-68494" }, { "category" : "external", "summary" : "RHBZ#2511026", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2511026" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-68494", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-68494" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-68494", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-68494" }, { "category" : "external", "summary" : "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd", "url" : "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd" }, { "category" : "external", "summary" : "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641", "url" : "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641" }, { "category" : "external", "summary" : "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8", "url" : "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8" }, { "category" : "external", "summary" : "https://github.com/FasterXML/jackson-core/pull/1611", "url" : "https://github.com/FasterXML/jackson-core/pull/1611" }, { "category" : "external", "summary" : "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9", "url" : "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9" }, { "category" : "external", "summary" : "https://github.com/advisories/GHSA-72hv-8253-57qq", "url" : "https://github.com/advisories/GHSA-72hv-8253-57qq" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-18401", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-18401" } ], "release_date" : "2026-08-04T14:39:14.471000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-08-11T16:39:22+00:00", "details" : "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:53644" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-0:2.16.0-22.redhat_00057.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-cli-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-commons-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-core-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-dto-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hornetq-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-hqclient-protocol-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jdbc-store-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-client-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-jms-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-journal-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-ra-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-selector-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-server-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-service-extensions-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-activemq-artemis-tools-0:2.16.0-22.redhat_00057.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-glassfish-jsf-0:2.3.14-11.SP11_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-0:1.5.26-2.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-common-spi-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-api-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-core-impl-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-deployers-common-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-jdbc-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-ironjacamar-validator-0:1.5.26-2.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-annotations-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-core-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-databind-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jdk8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-datatype-jsr310-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-json-provider-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-jaxrs-providers-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-module-jaxb-annotations-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-base-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jackson-modules-java8-0:2.18.8-1.redhat_00003.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-remoting-0:5.0.31-3.SP2_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-0:1.10.0-46.Final_redhat_00044.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-cli-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-jboss-server-migration-core-0:1.10.0-46.Final_redhat_00044.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-all-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-haproxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-http2-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-memcache-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-mqtt-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-redis-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-smtp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-stomp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-codec-xml-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-resolver-dns-classes-macos-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-classes-kqueue-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el7eap.x86_64", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-netty-transport-sctp-0:4.1.135-1.Final_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-bindings-0:2.5.5-30.SP12_redhat_00020.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-common-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-config-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-federation-0:2.5.5-24.SP12_redhat_00016.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-api-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-idm-simple-schema-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-impl-0:2.5.5-24.SP12_redhat_00016.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-picketlink-wildfly8-0:2.5.5-30.SP12_redhat_00020.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-undertow-0:2.2.40-2.SP3_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-0:7.4.25-2.GA_redhat_00001.1.el7eap.src", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk11-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-java-jdk8-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-javadocs-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch", "7Server-JBEAP-7.4-ELS:eap7-wildfly-modules-0:7.4.25-2.GA_redhat_00001.1.el7eap.noarch" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser" } ] }