RHSA-2026:67604

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security update

CVSS Metrics

• v3.1•HIGH•Score: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected Systems

• redhat•eap7-activemq-artemis

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-cli

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-commons

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-core-client

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-dto

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-hornetq-protocol

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-hqclient-protocol

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-jdbc-store

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-jms-client

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-jms-server

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-journal

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-ra

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-selector

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-server

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-service-extensions

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-activemq-artemis-tools

  < 0:2.16.0-23.redhat_00058.1.el7eap | < 0:2.16.0-23.redhat_00058.1.el8eap | < 0:2.16.0-23.redhat_00058.1.el9eap

• redhat•eap7-jackson-annotations

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-core

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-databind

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-datatype-jdk8

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-datatype-jsr310

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-jaxrs-base

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-jaxrs-json-provider

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-jaxrs-providers

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-module-jaxb-annotations

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-modules-base

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-jackson-modules-java8

  < 0:2.18.9-1.redhat_00003.1.el7eap | < 0:2.18.9-1.redhat_00003.1.el8eap | < 0:2.18.9-1.redhat_00003.1.el9eap

• redhat•eap7-wildfly

  < 0:7.4.25-6.GA_redhat_00005.1.el7eap | < 0:7.4.25-6.GA_redhat_00005.1.el8eap | < 0:7.4.25-6.GA_redhat_00005.1.el9eap

• redhat•eap7-wildfly-java-jdk11

  < 0:7.4.25-6.GA_redhat_00005.1.el7eap | < 0:7.4.25-6.GA_redhat_00005.1.el8eap | < 0:7.4.25-6.GA_redhat_00005.1.el9eap

• redhat•eap7-wildfly-java-jdk17

  < 0:7.4.25-6.GA_redhat_00005.1.el8eap | < 0:7.4.25-6.GA_redhat_00005.1.el9eap

• redhat•eap7-wildfly-java-jdk8

  < 0:7.4.25-6.GA_redhat_00005.1.el7eap | < 0:7.4.25-6.GA_redhat_00005.1.el8eap | < 0:7.4.25-6.GA_redhat_00005.1.el9eap

• redhat•eap7-wildfly-modules

  < 0:7.4.25-6.GA_redhat_00005.1.el7eap | < 0:7.4.25-6.GA_redhat_00005.1.el8eap | < 0:7.4.25-6.GA_redhat_00005.1.el9eap

References (33)

• https://access.redhat.com/errata/RHSA-2026:67604
• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
• https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
• https://bugzilla.redhat.com/show_bug.cgi?id=2477945
• https://bugzilla.redhat.com/show_bug.cgi?id=2480638
• https://bugzilla.redhat.com/show_bug.cgi?id=2492016
• https://bugzilla.redhat.com/show_bug.cgi?id=2500653
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67604.json
• https://access.redhat.com/security/cve/CVE-2026-49362
• https://www.cve.org/CVERecord?id=CVE-2026-49362
• https://nvd.nist.gov/vuln/detail/CVE-2026-49362
• https://access.redhat.com/security/cve/CVE-2026-54515
• https://www.cve.org/CVERecord?id=CVE-2026-54515
• https://nvd.nist.gov/vuln/detail/CVE-2026-54515
• https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa
• https://github.com/FasterXML/jackson-databind/issues/5962
• https://github.com/FasterXML/jackson-databind/issues/5964
• https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
• https://access.redhat.com/security/cve/CVE-2026-57967
• https://www.cve.org/CVERecord?id=CVE-2026-57967
• https://nvd.nist.gov/vuln/detail/CVE-2026-57967
• https://access.redhat.com/security/cve/CVE-2026-59889
• https://www.cve.org/CVERecord?id=CVE-2026-59889
• https://nvd.nist.gov/vuln/detail/CVE-2026-59889
• https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b
• https://github.com/FasterXML/jackson-databind/issues/6060
• https://github.com/FasterXML/jackson-databind/pull/6056
• https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh
• https://access.redhat.com/security/cve/CVE-2026-49364
• https://bugzilla.redhat.com/show_bug.cgi?id=2478013
• https://www.cve.org/CVERecord?id=CVE-2026-49364
• https://nvd.nist.gov/vuln/detail/CVE-2026-49364