Skip to content
OpenAdvisories
High RHSA-2026:0742 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 security update

Published Jan 19, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-annotations 0:2.8.11-2.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-core 0:2.8.11-3.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-datatype-jdk8 0:2.8.11-2.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-datatype-jsr310 0:2.8.11-2.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-jaxrs-base 0:2.8.11-3.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-jaxrs-json-provider 0:2.8.11-3.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-jaxrs-providers 0:2.8.11-3.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-module-jaxb-annotations 0:2.8.11-3.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-jackson-modules-java8 0:2.8.11-2.redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-netty 0:4.1.63-3.Final_redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-netty-all 0:4.1.63-3.Final_redhat_00004.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-undertow 0:1.4.18-18.SP16_redhat_00001.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-wildfly 0:7.1.13-6.GA_redhat_00002.1.ep7.el7
Red Hat · Jboss Enterprise Application Platform Eus 7 jboss_enterprise_application_platform_eus:7.1::el7 eap7-wildfly-modules 0:7.1.13-6.GA_redhat_00002.1.ep7.el7

Vulnerabilities 2

  • High 8.7
    CVE-2025-52999 Public exploit

    jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

    jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…

    FasterXML jackson-core druid tez Debian Ubuntu Wolfi Maven
  • High 8.2
    CVE-2025-55163 Public exploit

    Netty MadeYouReset HTTP/2 DDoS Vulnerability

    Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=7.1
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2388252
  • article
    https://issues.redhat.com/browse/JBEAP-30775
  • article
    https://issues.redhat.com/browse/JBEAP-31347
  • article
    https://issues.redhat.com/browse/JBEAP-31349
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0742.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-52999
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-52999
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-52999
  • article
    https://github.com/FasterXML/jackson-core/pull/943
  • article
    https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3
  • report
    https://access.redhat.com/security/cve/CVE-2025-55163
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-55163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-55163
  • article
    https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4
  • article
    https://kb.cert.org/vuls/id/767506