RHSA-2026:0742

HIGH7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 security update

Published Jan 19, 2026

Modified Yesterday

Fix available

Affected Packages(14 packages)

eap7-jackson-annotations

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-2.redhat_00004.1.ep7.el7

eap7-jackson-core

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-3.redhat_00004.1.ep7.el7

eap7-jackson-datatype-jdk8

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-2.redhat_00004.1.ep7.el7

eap7-jackson-datatype-jsr310

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-2.redhat_00004.1.ep7.el7

eap7-jackson-jaxrs-base

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-3.redhat_00004.1.ep7.el7

eap7-jackson-jaxrs-json-provider

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-3.redhat_00004.1.ep7.el7

eap7-jackson-jaxrs-providers

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-3.redhat_00004.1.ep7.el7

eap7-jackson-module-jaxb-annotations

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-3.redhat_00004.1.ep7.el7

eap7-jackson-modules-java8

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:2.8.11-2.redhat_00004.1.ep7.el7

eap7-netty

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Fixed in:

0:4.1.63-3.Final_redhat_00004.1.ep7.el7

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0742 ARTICLEhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=7.1 REPORThttps://access.redhat.com/security/cve/CVE-2025-52999 REPORThttps://access.redhat.com/security/cve/CVE-2025-55163 ARTICLEhttps://access.redhat.com/security/updates/classification/#critical REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2374804 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2388252 ARTICLEhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1 ARTICLEhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index ARTICLEhttps://github.com/FasterXML/jackson-core/pull/943 ARTICLEhttps://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3 ARTICLEhttps://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4 ARTICLEhttps://issues.redhat.com/browse/JBEAP-30775 ARTICLEhttps://issues.redhat.com/browse/JBEAP-31347 ARTICLEhttps://issues.redhat.com/browse/JBEAP-31349 ARTICLEhttps://kb.cert.org/vuls/id/767506 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-52999 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-55163 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0742.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-52999 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-55163

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-52999 CVE-2025-55163

Ecosystems

Red Hat jboss_enterprise_application_platform_eus 7.1 el7

Timeline

PublishedJan 19, 2026

ModifiedJan 19, 2026