RHSA-2026:0743

HIGH7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update

Published Jan 19, 2026

Modified Yesterday

Fix available

Affected Packages(41 packages)

eap7-jackson-annotations

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-4.redhat_00008.1.el7eap

eap7-jackson-core

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-4.redhat_00008.1.el7eap

eap7-jackson-databind

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-6.redhat_00008.1.el7eap

eap7-jackson-datatype-jdk8

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-3.redhat_00008.1.el7eap

eap7-jackson-datatype-jsr310

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-3.redhat_00008.1.el7eap

eap7-jackson-jaxrs-base

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-4.redhat_00008.1.el7eap

eap7-jackson-jaxrs-json-provider

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-4.redhat_00008.1.el7eap

eap7-jackson-jaxrs-providers

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-4.redhat_00008.1.el7eap

eap7-jackson-module-jaxb-annotations

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-6.redhat_00008.1.el7eap

eap7-jackson-modules-base

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Fixed in:

0:2.10.4-6.redhat_00008.1.el7eap

References(26)

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0743 REPORThttps://access.redhat.com/security/cve/CVE-2024-7885 REPORThttps://access.redhat.com/security/cve/CVE-2025-52999 REPORThttps://access.redhat.com/security/cve/CVE-2025-55163 ARTICLEhttps://access.redhat.com/security/updates/classification/#critical ARTICLEhttps://access.redhat.com/security/vulnerabilities/RHSB-2023-003 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2305290 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2374804 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2388252 ARTICLEhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3 ARTICLEhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index ARTICLEhttps://github.com/FasterXML/jackson-core/pull/943 ARTICLEhttps://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3 ARTICLEhttps://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4 ARTICLEhttps://issues.redhat.com/browse/JBEAP-30792 ARTICLEhttps://issues.redhat.com/browse/JBEAP-31038 ARTICLEhttps://issues.redhat.com/browse/JBEAP-31348 ARTICLEhttps://issues.redhat.com/browse/JBEAP-31350 ARTICLEhttps://kb.cert.org/vuls/id/767506 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-7885 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-52999 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-55163 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0743.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-7885 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-52999

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2024-7885 CVE-2025-52999 CVE-2025-55163

Ecosystems

Red Hat jboss_enterprise_application_platform_eus 7.3 el7

Timeline

PublishedJan 19, 2026

ModifiedJan 19, 2026