RHSA-2026:18055: Red Hat JBoss EAP 8.1 Important Security Advisory

RHSA-2026:18055 - Security Advisory Vulnerability Overview Red Hat JBoss Enterprise Application Platform 8.1 has released a security update to address multiple security vulnerabilities. The Red Hat Security Team has rated this update as "Important". Affected Scope Affected Products: Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9 Key Vulnerabilities: CVE-2026-23368: WildFly Elytron Brute Force Attack via CLI CVE-2026-27904: minichat: Denial of Service via catastrophic backtracking in glob expressions CVE-2026-27830: c3p0: Arbitrary Code Execution via deserialization of crafted objects CVE-2026-33870: netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values CVE-2026-5588: bouncycastle: PKIX draft CompositeVerifier accepts empty signature sequence as valid CVE-2026-3505: bouncycastle: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion CVE-2026-27446: artemis-server: Message injection and edit/delete due to missing authentication CVE-2026-27727: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects CVE-2026-0636: bcpkix-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java CVE-2026-5598: bcpkix-jdk12: private key leakage via non-constant time comparisons CVE-2025-14813: bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly Remediation Upgrade Software: Upgrade Red Hat JBoss Enterprise Application Platform 8.1 to the version containing the fix. Specific Component Fixes: Upgrade WildFly Elytron to 2.5.0.Final-redhat-00001 Upgrade WildFly Http Client to 2.1.4.Final-redhat-00001 Upgrade WildFly Core to 27.1.7.Final-redhat-00001 Upgrade Hibernate ORM to 6.6.4.Final-redhat-00001 Upgrade Artemis to 2.40.0.redhat-00002 Upgrade netty to 4.1.132.Final-redhat-00001 Upgrade bouncycastle to 1.83.0.redhat-00001 Operational Recommendation**: Before applying the update, ensure all relevant errata have been applied and back up the existing installation (including applications, configuration files, databases, and database settings).

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:18055: Red Hat JBoss EAP 8.1 Important Security Advisory