About CVE-2026-34197 and TomEE 10.0.1
COURTAULT Francois <[email protected]> Thu, 28 May 2026 13:33:15 +0000
| Newsgroups | gmane.comp.java.openejb.user |
|---|---|
| Message-ID | <MR1PPF8993717D7D9E8FD1AF6681EFA7DF09D092@MR1PPF8993717D7.FRAP264.PROD.OUTLOOK.COM> |
VEhBTEVTIEdST1VQIExJTUlURUQgRElTVFJJQlVUSU9OIHRvIGVtYWlsIHJlY2lwaWVudHMNCg0K SGVsbG8gZXZlcnlvbmUsDQoNCkkgcHVyc3VlIG15IGludmVzdGlnYXRpb25zIGFib3V0IHRoaXMg Q1ZFLg0KRnJvbSB0aGUgaW5mb3JtYXRpb24gSSBnb3QgZnJvbSBpbnRlcm5ldCwgbXkgdW5kZXJz dGFuZGluZyBpcyB0aGF0IEFjdGl2ZU1RIGNvdWxkIGhhdmUgMiBwb3J0cyBvcGVuZWQ6DQogICAg IC0gODE2MSBmb3IgdGhlIEFjdGl2ZU1RIGNvbnNvbGUNCiAgICAgLSA2MTYxNiBmb3IgdGhlIG1l c3NhZ2UgYnJva2VyIGl0c2VsZg0KDQpJcyBteSB1bmRlcnN0YW5kaW5nIGNvcnJlY3QgPw0KDQpN eSBUb21FRSBQbHVzIGlzIHJ1bm5pbmcgaW4gYSBjdXN0b20gRG9ja2VyIGNvbnRhaW5lci4NCklm IEkgZW50ZXIgaW4gdGhpcyBjb250YWluZXIgYW5kIHBlcmZvcm0gYSBjdXJsIC12IC1IICdBdXRo b3JpemF0aW9uOiBCYXNpYyBZV1J0YVc0NllXUnRhVzQ9JyBodHRwOi8vbG9jYWxob3N0OjgxNjEv YWRtaW4sIEkgZ2V0Og0KKiAgIFRyeWluZyA6OjE6ODE2MS4uLg0KKiBjb25uZWN0IHRvIDo6MSBw b3J0IDgxNjEgZmFpbGVkOiBDb25uZWN0aW9uIHJlZnVzZWQNCiogICBUcnlpbmcgMTI3LjAuMC4x OjgxNjEuLi4NCiogY29ubmVjdCB0byAxMjcuMC4wLjEgcG9ydCA4MTYxIGZhaWxlZDogQ29ubmVj dGlvbiByZWZ1c2VkDQp3aGljaCBtZWFucyB0aGF0IHRoZSBBY3RpdmVNUSBjb25zb2xlIGlzIG5v dCByZWFjaGFibGUuDQoNCk1vcmUgSSB0cnkgdG8gZmluZCBqZXR0eS1yZWFsIGZpbGUgYnV0IEkg Y2FuJ3QgZmluZCBpdCBpbiBUb21FRSBQbHVzLg0KDQpTbyBhbGwgb2YgdGhlc2UgZXZpZGVuY2Vz ICBtYWtlIG1lIHRoaW5rIHRoYXQgQ1ZFLTIwMjYtMzQxOTcsIGluIGEgcHVyZSBUb21FRSBQbHVz IGNvbnRleHQsIGlzIGEgZmFsc2UgcG9zaXRpdmUgYXMgdGhlIEFjdGl2ZU1RIGNvbnNvbGUgaXMg bm90IGRlcGxveWVkLg0KRG8geW91IGNvbmZpcm0gPw0KDQpCZXN0IHJlZ2FyZHMuDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBDT1VSVEFVTFQgRnJhbmNvaXMgPGZyYW5jb2lz LmNvdXJ0YXVsdEB0aGFsZXNncm91cC5jb20+DQpTZW50OiBtZXJjcmVkaSAyNyBtYWkgMjAyNiAx ODo1Mw0KVG86IHVzZXJzQHRvbWVlLmFwYWNoZS5vcmcNClN1YmplY3Q6IFJFOiBbQU5OT1VOQ0Vd IEFwYWNoZSBUb21FRSAxMC4xLjUNCg0KVEhBTEVTIEdST1VQIExJTUlURUQgRElTVFJJQlVUSU9O IHRvIGVtYWlsIHJlY2lwaWVudHMNCg0KSGVsbG8gZXZlcnlvbmUsDQoNCkZvcmdldCBteSBsYXN0 IHBvc3QuDQpJZiBJIGxvb2sgYXQgQ1ZFLTIwMjYtMzQxOTcsICBpdCByZXF1aXJlcyB1c2VyL3Bh c3N3b3JkIGF1dGhlbnRpY2F0aW9uIG9uIHRoZSBBY3RpdmVNUSBjb25zb2xlIHVzaW5nIHRoZSBm b2xsb3dpbmcgVVJMOiBodHRwOi8vbG9jYWxob3N0OjgxNjEvYWRtaW4gYW5kIHRoZW4gYSBjYWxs IGh0dHA6Ly9sb2NhbGhvc3Q6ODE2MS9hcGkvam9sb2tpYS8uDQoNCkkgdGhpbmsgdGhhdCBpZiB3 ZSB1c2UgYW55IEpNUyBBUElzIGluIG91ciBjb2RlLCBBY3RpdmVNUSB3aWxsIGJlIHN0YXJ0ZWQs IHJpZ2h0ID8NCg0KVGhlIHF1ZXN0aW9uIGlzOiBkb2VzIHRoZSBBY3RpdmVNUSBjb25zb2xlIHN0 YXJ0IGFzIHdlbGwgPw0KSWYgeWVzLCBpcyB0aGVyZSBhIHdheSB0byBmb3JiaWQgdGhlIHBhdGgg YXBpL2pvbG9raWEgYWNjZXNzID8NCg0KQmVzdCBSZWdhcmRzLg0KDQotLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KRnJvbTogQ09VUlRBVUxUIEZyYW5jb2lzIDxmcmFuY29pcy5jb3VydGF1bHRA dGhhbGVzZ3JvdXAuY29tPg0KU2VudDogbWVyY3JlZGkgMjcgbWFpIDIwMjYgMTg6MjINClRvOiB1 c2Vyc0B0b21lZS5hcGFjaGUub3JnDQpTdWJqZWN0OiBSRTogW0FOTk9VTkNFXSBBcGFjaGUgVG9t RUUgMTAuMS41DQoNClRIQUxFUyBHUk9VUCBMSU1JVEVEIERJU1RSSUJVVElPTiB0byBlbWFpbCBy ZWNpcGllbnRzDQoNCkhlbGxvIFJpY2hhcmQsDQoNCklmIEkgbG9vayBhdCBDVkUtMjAyNi0zNDE5 NywgIGl0IHJlcXVpcmVzIHVzZXIvcGFzc3dvcmQgYXV0aGVudGljYXRpb24gdXNpbmcgdGhlIGZv bGxvd2luZyBVUkw6IGh0dHA6Ly9sb2NhbGhvc3Q6ODE2MS9hZG1pbiBhbmQgdGhlbiBhIGNhbGwg aHR0cDovL2xvY2FsaG9zdDo4MTYxL2FwaS9qb2xva2lhLy4NCg0KQnV0IGl0IHNlZW1zIHRoYXQg VG9tRUUgMTAuMC4xIGRvZXNuJ3Qgc3RhcnQgdGhlIEFjdGl2ZU1RIGNvbnNvbGUuIFNvLCB0aGlz IENWRSBpcyBub3QgcHJlc2VudCBpbiBUb21FRSwgcmlnaHQgPw0KDQpJcyB0aGVyZSBhIHdheSwg dXNpbmcgVG9tRUUsIHRvIHN0YXJ0IHRoZSBBY3RpdmVNUSBjb25zb2xlID8NCklmIHRoZXJlIGlz IG5vbmUgdGhlbiBUb21FRSBpc24ndCBhZmZlY3RlZCBieSB0aGlzIENWRSwgcmlnaHQgPw0KDQpC ZXN0IFJlZ2FyZHMuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBSaWNoYXJk IFpvd2FsbGEgPHJ6bzFAYXBhY2hlLm9yZz4NClNlbnQ6IG1hcmRpIDUgbWFpIDIwMjYgMTI6MzIN ClRvOiB1c2Vyc0B0b21lZS5hcGFjaGUub3JnDQpTdWJqZWN0OiBSZTogW0FOTk9VTkNFXSBBcGFj aGUgVG9tRUUgMTAuMS41DQoNCkp1c3QgcmVwbGFjZSB0aGUgcmVsYXRlZCBqYXIgZmlsZXMgaW4g dGhlIGRpc3RyaWJ1dGlvbi4NCg0KPiBBbSAwNS4wNS4yMDI2IHVtIDEyOjI3IHNjaHJpZWIgQ09V UlRBVUxUIEZyYW5jb2lzIDxmcmFuY29pcy5jb3VydGF1bHRAdGhhbGVzZ3JvdXAuY29tPjoNCj4N Cj4gVEhBTEVTIEdST1VQIExJTUlURUQgRElTVFJJQlVUSU9OIHRvIGVtYWlsIHJlY2lwaWVudHMN Cj4NCj4gSGVsbG8sDQo+DQo+IENvbmdyYXRzIGZvciB0aGlzIG5ldyByZWxlYXNlIPCfmIoNCj4N Cj4gUmVnYXJkaW5nIEFjdGl2ZU1RLCBJIGFncmVlIHRoYXQgQWN0aXZlTVEgNi4yLjUgaGFzIGJl ZW4gcmVsZWFzZWQgMTUgZGF5cyBhZnRlciA2LjIuNCBzbyBxdWl0ZSBkaWZmaWN1bHQgdG8gaW50 ZWdyYXRlIGluIFRvbUVFIDEwLjEuNS4NCj4gRG8geW91IHRoaW5rIHRoZXJlIGlzIGhpZ2ggcmlz ayBpZiBJIHVwZGF0ZSBBY3RpdmVNUSB0byA2LjIuNSBpbnN0ZWFkIG9mIDYuMi40ICg3IGphcnMg dG8gdXBkYXRlKSA/DQo+DQo+IFdoeSBub3QgaW50ZWdyYXRpbmcgbmVldGhpIDMuMi4yIGluc3Rl YWQgb2YgbmVldGhpIDMuMi4xIHdoaWNoIGZpeGVzIDEgY3JpdGljYWwgQ1ZFOiBDVkUtMjAyNi00 MjQwMyA/IElzIGl0IGJlY2F1c2UgaXQgaGFzbid0IGJlZW4gdGFnIGFzIExhdGVzdCA/IFNhbWUg cXVlc3Rpb246IGhpZ2ggcmlzayBpZiBJIHVwZGF0ZSAgbmVldGhpIDMuMi4xIGJ5IG5lZXRoaSAz LjIuMiA/DQo+DQo+IEJlc3QgUmVnYXJkcy4NCj4NCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCj4gRnJvbTogTWFya3VzIEp1bmcgPGp1bmdtQGFwYWNoZS5vcmc+DQo+IFNlbnQ6IG1hcmRp IDUgbWFpIDIwMjYgMTA6MzANCj4gVG86IGRldkB0b21lZS5hcGFjaGUub3JnOyB1c2Vyc0B0b21l ZS5hcGFjaGUub3JnOyBhbm5vdW5jZUBhcGFjaGUub3JnDQo+IFN1YmplY3Q6IFtBTk5PVU5DRV0g QXBhY2hlIFRvbUVFIDEwLjEuNQ0KPg0KPiBUaGUgQXBhY2hlIFRvbUVFIHRlYW0gaXMgcGxlYXNl ZCB0byBhbm5vdW5jZSB0aGUgZ2VuZXJhbCBhdmFpbGFiaWxpdHkgb2YgVG9tRUUgMTAuMS41DQo+ DQo+IEFwYWNoZSBUb21FRSBkZWxpdmVycyBlbnRlcnByaXNlIGFwcGxpY2F0aW9uIGNvbnRhaW5l cnMgYW5kIHNlcnZpY2VzIGJhc2VkIG9uLCBidXQgbm90IGxpbWl0ZWQgdG8gdGhlIEVudGVycHJp c2UgSmF2YUJlYW5zIFNwZWNpZmljYXRpb24gYW5kIEphdmEvSmFrYXJ0YSBFbnRlcnByaXNlIEVk aXRpb24gU3BlY2lmaWNhdGlvbnMuDQo+DQo+IFRoaXMgcmVsZWFzZSBzaGlwcyBmaXhlcyByZWxh dGVkIHRvIHRoZSBpbXBsZW1lbnRhdGlvbiBvZiB0aGUgQE9wZW5JZEF1dGhlbnRpY2F0aW9uTWVj aGFuaXNtRGVmaW5pdGlvbiwgZml4ZXMgYW4gaXNzdWUgd2l0aCByZXNvdXJjZSBjb25zdHJ1Y3Rp b24sIGhhcyBhIHNtYWxsIGltcHJvdmVtZW50IGluIGxvZ2dpbmcsIGFuZCBmZWF0dXJlcyB0aGUg dXN1YWwgZGVwZW5kZW5jeSB1cGdyYWRlcy4NCj4NCj4gRnVsbCByZWxlYXNlIG5vdGVzOiBodHRw czovL3RvbWVlLmFwYWNoZS5vcmcvMTAuMS41L3JlbGVhc2Utbm90ZXMuaHRtbA0KPg0KPiBEb3du bG9hZHMgYXJlIGF2YWlsYWJsZSBhdDogaHR0cHM6Ly90b21lZS5hcGFjaGUub3JnL2Rvd25sb2Fk Lmh0bWwNCj4NCj4gLSBUaGUgQXBhY2hlIFRvbUVFIFRlYW0NCj4NCj4NCg0KDQoNCg0K