RHSA-2026:49700
Vulnerability from csaf_redhat - Published: 2026-08-03 15:45 - Updated: 2026-09-25 15:31Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Severity
Important
Notes
Topic: A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.
This asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.1. See Release Notes for information about the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.
7.5 (High)
Affected products
Fixed
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. Netty's DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.
7.5 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.
7.2 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.
7.3 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate web traffic.
6.5 (Medium)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Moderate
A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
81 products, the same list as for
CVE-2026-42578
Threats
Impact
Important
References
70 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.\n\nThis asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.1. See Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n\n* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n\n* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)\n\n* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n\n* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49700",
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/7145683",
"url": "https://access.redhat.com/articles/7145683"
},
{
"category": "external",
"summary": "2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "JBEAP-33514",
"url": "https://issues.redhat.com/browse/JBEAP-33514"
},
{
"category": "external",
"summary": "JBEAP-33903",
"url": "https://issues.redhat.com/browse/JBEAP-33903"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49700.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update",
"tracking": {
"current_release_date": "2026-09-25T15:31:47+00:00",
"generator": {
"date": "2026-09-25T15:31:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:49700",
"initial_release_date": "2026-08-03T15:45:22+00:00",
"revision_history": [
{
"date": "2026-08-03T15:45:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T15:45:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-25T15:31:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss EAP 8.1 for RHEL 9",
"product": {
"name": "Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss EAP 8.1 for RHEL 8",
"product": {
"name": "Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss EAP 8.1 for RHEL 10",
"product": {
"name": "Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el9eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el9eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"product": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"product_id": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-jose4j@0.9.6-2.redhat_00002.1.el9eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el9eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el9eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"product": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"product_id": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-jose4j@0.9.6-2.redhat_00002.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el10eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el10eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el10eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el10eap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-common@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.135-1.Final_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"product": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"product_id": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-jose4j@0.9.6-2.redhat_00002.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.7.1-1.GA_redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product": {
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_id": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17@8.1.7.1-1.GA_redhat_00004.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_id": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.7.1-1.GA_redhat_00004.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_id": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.7.1-1.GA_redhat_00004.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-common@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.135-1.Final_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"product": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"product_id": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-jose4j@0.9.6-2.redhat_00002.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.7.1-1.GA_redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product": {
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_id": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17@8.1.7.1-1.GA_redhat_00004.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_id": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.7.1-1.GA_redhat_00004.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_id": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.7.1-1.GA_redhat_00004.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-common@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.135-1.Final_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.7.1-1.GA_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.7.1-1.GA_redhat_00001.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_id": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly@8.1.7.1-1.GA_redhat_00004.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_id": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.7.1-1.GA_redhat_00004.1.el10eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_id": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.7.1-1.GA_redhat_00004.1.el10eap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el9eap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.135-1.Final_redhat_00001.1.el9eap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el8eap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.135-1.Final_redhat_00001.1.el8eap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.135-1.Final_redhat_00001.1.el10eap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.135-1.Final_redhat_00001.1.el10eap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch"
},
"product_reference": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch"
},
"product_reference": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 10",
"product_id": "10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch"
},
"product_reference": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"relates_to_product_reference": "10Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch"
},
"product_reference": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src"
},
"product_reference": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch"
},
"product_reference": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch"
},
"product_reference": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
"product_id": "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch"
},
"product_reference": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src"
},
"product_reference": "eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch"
},
"product_reference": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src"
},
"product_reference": "eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src"
},
"product_reference": "eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64"
},
"product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src"
},
"product_reference": "eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
},
"product_reference": "eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
},
"product_reference": "eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
"product_id": "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
},
"product_reference": "eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-8.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42578",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-05-13T19:02:00.826936+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477226"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This vulnerability in Netty\u0027s HttpProxyHandler allows for HTTP header injection into CONNECT requests when an attacker can influence outbound headers. The handler\u0027s explicit disabling of header validation could enable proxy-related attacks, such as cache poisoning or bypassing security controls, impacting applications utilizing this component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42578"
},
{
"category": "external",
"summary": "RHBZ#2477226",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477226"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr",
"url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
}
],
"release_date": "2026-05-13T17:57:43.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Applications utilizing Netty\u0027s HttpProxyHandler must ensure that any user-controlled input used to populate outbound headers is rigorously sanitized to prevent CRLF injection. If comprehensive input sanitization cannot be implemented, restricting network access to the application that uses the HttpProxyHandler can reduce the attack surface.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
},
{
"cve": "CVE-2026-42579",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-13T19:01:25.062732+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477217"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. Netty\u0027s DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important integrity flaw in Netty\u0027s DNS codec. The vulnerability arises from insufficient enforcement of RFC 1035 domain name constraints during both encoding and decoding, allowing remote attackers to manipulate DNS responses or user-controlled hostnames. This could lead to a high integrity impact on affected Red Hat products that utilize the vulnerable Netty DNS codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42579"
},
{
"category": "external",
"summary": "RHBZ#2477217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
}
],
"release_date": "2026-05-13T18:01:52.500000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement"
},
{
"cve": "CVE-2026-42581",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:02:26.404511+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477232"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. Netty\u0027s HttpObjectDecoder, used across various Red Hat products, improperly handles conflicting `Transfer-Encoding: chunked` and `Content-Length` headers in HTTP/1.0 requests. This allows a remote attacker to perform HTTP request smuggling, potentially bypassing security controls or gaining unauthorized access to information due to misinterpretation of message boundaries by downstream proxies or handlers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42581"
},
{
"category": "external",
"summary": "RHBZ#2477232",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477232"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
}
],
"release_date": "2026-05-13T17:54:44.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure any reverse proxies or load balancers in front of Netty to either reject HTTP/1.0 requests containing both Transfer-Encoding: chunked and Content-Length headers, or to explicitly prioritize the Transfer-Encoding header over Content-Length for HTTP/1.0 traffic. This ensures consistent interpretation of message boundaries and prevents request smuggling attacks.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers"
},
{
"cve": "CVE-2026-42584",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:01:51.846351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Netty\u0027s HttpClientCodec allows a remote attacker to cause data confusion. By sending a specially crafted sequence of HTTP responses, an attacker can cause subsequent HTTP responses to be parsed incorrectly, potentially leading to information disclosure or data integrity issues in applications utilizing Netty for HTTP client operations. This vulnerability affects various Red Hat products that bundle Netty, including Red Hat AMQ, Enterprise Application Platform, Red Hat Build of Quarkus, and Red Hat Build of Keycloak.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42584"
},
{
"category": "external",
"summary": "RHBZ#2477224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3",
"url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
}
],
"release_date": "2026-05-13T18:10:48.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion"
},
{
"cve": "CVE-2026-42585",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:02:06.067565+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477227"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate web traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Netty\u0027s HTTP codec allows for request smuggling attacks due to improper parsing of malformed Transfer-Encoding headers. An attacker could exploit this to bypass security controls, potentially leading to unauthorized access to sensitive information or manipulation of web traffic in Red Hat products utilizing affected Netty versions, particularly when deployed behind a proxy or load balancer.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42585"
},
{
"category": "external",
"summary": "RHBZ#2477227",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477227"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42585"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42585",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42585"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv"
}
],
"release_date": "2026-05-13T18:12:39.586000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing"
},
{
"cve": "CVE-2026-42587",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:35.415881+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477220"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42587"
},
{
"category": "external",
"summary": "RHBZ#2477220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
}
],
"release_date": "2026-05-13T18:22:21.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T15:45:22+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49700"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el10eap.x86_64",
"10Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.src",
"10Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"10Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el10eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el8eap.x86_64",
"8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.src",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el8eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.7.1-1.GA_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.7.1-1.GA_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-jose4j-0:0.9.6-2.redhat_00002.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.135-1.Final_redhat_00001.1.el9eap.x86_64",
"9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.135-1.Final_redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.src",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch",
"9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.7.1-1.GA_redhat_00004.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…