Red Hat Security AdvisoryRHSA-2026:0743
Red Hat JBoss Enterprise Application Platform 7.3.16 security update
Released 2026-01-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server eap7-jackson-annotations-2.10.4-4.redhat_00008.1.el7eap, eap7-jackson-core-2.10.4-4.redhat_00008.1.el7eap, eap7-jackson-databind-2.10.4-6.redhat_00008.1.el7eap +38
Fixes 3 records
Priority MEDIUM 45
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00772 · Published 2025-06-25 · Partial fix · 2.15.0 CWE-121
Priority MEDIUM 44
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.01125 · Published 2025-08-13 · Partial fix · 4.1.124.Final, 4.2.4.Final +1 CWE-770
Priority LOW 38
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2024-08-21 · Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362
