Loading story…
Red Hat released JBoss Enterprise Application Platform (EAP) 7.4.4 for Red Hat Enterprise Linux 7, replacing EAP 7.4.3 and updating org.apache.logging.log4j from version 2.14.0.redhat-00002 to 2.17.1.redhat-00001. The security update addresses seven Apache Log4j and Log4j Core vulnerabilities: CVE-2021-4104, CVE-2021-44832, CVE-2021-45046, CVE-2021-45105, CVE-2022-23302, CVE-2022-23305, and CVE-2022-23307; several have conditionally exploitable remote-code-execution impact.
The EAP 7.4.z maintenance work also included an upgrade of Hibernate ORM from 5.3.24.Final-redhat-00001 to 5.3.25.Final-redhat-00002. Red Hat advised customers to back up existing EAP installations and deployed applications before applying the RHSA-2022:1296 update.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Unity Linux published advisory UTSA-2026-031579 for jboss-logging packages on Unity Linux 20.1050e, 20.1060e, 20.1070-8ae, and 20.1070e. The update remediates CVE-2021-45105, a Log4j2 uncontrolled-recursion flaw that can cause denial of service when an attacker controls Thread Context Map data.
Unity Linux published advisory UTSA-2026-031578 for jboss-logging packages on Unity Linux 20.1050e, 20.1060e, 20.1070-8ae, and 20.1070e. The update remediates CVE-2021-45046, the incomplete Log4Shell mitigation that can enable information disclosure and code execution in certain logging configurations.
Unity Linux published advisory UTSA-2026-030642 for affected wildfly-security-manager packages on Unity Linux 20 releases, remediating CVE-2021-45046. The update addresses the incomplete Log4Shell fix that can permit information disclosure or code execution in certain logging configurations.
Red Hat issued low-severity advisory RHSA-2022:1296 for JBoss Enterprise Application Platform 7.4 on RHEL 7. The update replaced EAP 7.4.3 with 7.4.4, upgraded Log4j to 2.17.1, and remediated seven Log4j/Log4j Core vulnerabilities, including conditionally exploitable remote-code-execution flaws.
Red Hat closed its tracking bug for CVE-2022-23305, an SQL-injection issue affecting Log4j 1.2.x deployments explicitly configured with JDBCAppender. Attackers able to control logged application input or HTTP headers could manipulate the configured SQL statement through crafted log messages.
Red Hat issued RHSA-2021:5094 for OpenShift Container Platform 3.11.z, providing updated packages and images that remediate Log4Shell (CVE-2021-44228) in log4j-core. The advisory also referenced CVE-2021-45046 and instructed administrators to upgrade clusters through the asynchronous errata update.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
8 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourceissues.redhat.com
Open sourceissues.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **JBoss Enterprise Application Platform (EAP) 6.4.14** to replace 6.4.13 and remediate three security flaws across EAP 6 packages for supported RHEL 5, 6, and 7 deployments, including `jboss-ec2-eap`. **CVE-2016-8657** allowed local members of the `jboss` group to modify the group-writable `/etc/sysconfig/jbossas` file; on RHEL 6 and earlier systems using legacy `/etc/init.d` service scripts, that file was sourced with root privileges during JBoss service operations, enabling local privilege escalation. The release also fixes **CVE-2017-6056**, an Apache Tomcat HTTPS request-processing flaw that could trigger an infinite loop and denial of service, and **CVE-2016-6346**, where RESTEasy's `GZIPInterceptor` could be unnecessarily enabled and permit denial of service. Red Hat advised customers to back up EAP installations and deployed applications before updating. The vendor clarified that the initial ZIP-distribution advisory did not resolve CVE-2016-8657, because the affected writable configuration file was present in RPM-based installations.
Aug 28, 2026
Red Hat released **JBoss Enterprise Application Platform (EAP) 7.4.12**, replacing 7.4.11 and remediating denial-of-service flaws in Undertow, Jackson Databind, and Jettison: `CVE-2023-3223`, `CVE-2021-46877`, and `CVE-2023-1436`. The update is rated **Important** and also includes bug fixes, enhancements, and component updates affecting Undertow and Jettison. Related EAP 7.4 maintenance work upgraded dependencies including WSS4J, JGroups Kubernetes discovery, PicketLink and PicketLink bindings, and the JBoss EJB client. Red Hat advises customers to back up existing EAP installations and deployed applications before applying the update.
Aug 27, 2026
Red Hat released **RHSA-2017:0247** to update JBoss Enterprise Application Platform 6 from 6.4.12 to 6.4.13, addressing HTTP request smuggling (`CVE-2016-6816`), log-download resource exhaustion (`CVE-2016-8627`), and sensitive-information disclosure through role-based access control (`CVE-2016-7061`). The log-download flaw could allow cross-origin GET requests to consume server resources and impair service availability, while the RBAC flaw let Monitor-role users in domain mode view sensitive socket-binding and internal network configuration at the server level. For EAP 6.4 deployments on RHEL 6 using the EC2 package, **RHSA-2017:0250** supplied `jboss-ec2-eap-7.5.13-1.Final_redhat_2.ep6.el6` and included fixes for these issues plus a local privilege-escalation issue. Red Hat later clarified that `CVE-2016-8656`, an unsafe-file-handling flaw in JBoss initialization scripts affecting RPM installations, was incorrectly listed as resolved by RHSA-2017:0247 because that advisory covered ZIP-distributed EAP files; affected organizations should apply the applicable supported EAP and package updates after backing up installations and deployed applications.
Aug 28, 2026