TI-2026-04906 CVE-2026-5598 · GHSA-p93r-85wp-75v3
Non-constant time comparisons risk private key leakage in FrodoKEM.
Priority MEDIUM 48
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc.
RHSA-2026:12267
Red Hat JBoss Enterprise Application Platform 7.4.24 security update
Released 2026-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server eap7-bouncycastle-1.84.0-1.redhat_00001.1.el7eap, eap7-bouncycastle-mail-1.84.0-1.redhat_00001.1.el7eap, eap7-bouncycastle-pg-1.84.0-1.redhat_00001.1.el7eap +3
- Red Hat JBoss EAP 7.4 ELS for RHEL 8 eap7-bouncycastle-1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-mail-1.84.0-1.redhat_00001.1.el8eap, eap7-bouncycastle-pg-1.84.0-1.redhat_00001.1.el8eap +3
- Red Hat JBoss EAP 7.4 ELS for RHEL 9 eap7-bouncycastle-1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-mail-1.84.0-1.redhat_00001.1.el9eap, eap7-bouncycastle-pg-1.84.0-1.redhat_00001.1.el9eap +3