RE: About CVE-2026-34197 and TomEE 10.0.1
COURTAULT Francois <[email protected]> Tue, 2 Jun 2026 09:39:14 +0000
| Newsgroups | gmane.comp.java.openejb.user |
|---|---|
| Message-ID | <MRYP264MB6368A90A9F3CFF69CA629EF99D122@MRYP264MB6368.FRAP264.PROD.OUTLOOK.COM> |
VEhBTEVTIEdST1VQIExJTUlURUQgRElTVFJJQlVUSU9OIHRvIGVtYWlsIHJlY2lwaWVudHMNCg0K SGVsbG8gUmljaGFyZCwNCg0KR3JlYXQgdGhhdCB5b3UgY29uZmlybSBteSBhbmFseXNpcyBhbmQg eW91IHRha2UgdGltZSB0byBhbnN3ZXIgdG8gbWUuDQpSZWFsbHkgYXBwcmVjaWF0ZTogdGhhbmtz IGEgbG90ICEhIQ0KDQpCZXN0IFJlZ2FyZHMuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQpGcm9tOiBSaWNoYXJkIFpvd2FsbGEgPHJ6bzFAYXBhY2hlLm9yZz4NClNlbnQ6IG1hcmRpIDIg anVpbiAyMDI2IDExOjI4DQpUbzogdXNlcnNAdG9tZWUuYXBhY2hlLm9yZw0KU3ViamVjdDogUmU6 IEFib3V0IENWRS0yMDI2LTM0MTk3IGFuZCBUb21FRSAxMC4wLjENCg0KSGksDQoNClRvbUVFIGRv ZXMgbm90IHNoaXAgdGhlIEFjdGl2ZU1RIFdlYiBDb25zb2xlIGF0IGFsbC4gVG9tRUUgUGx1cyAo YW5kIFBsdW1lKSBvbmx5IGJ1bmRsZSB0aGUgZm9sbG93aW5nIEFjdGl2ZU1RIGFydGlmYWN0czog YWN0aXZlbXEtYnJva2VyLCBhY3RpdmVtcS1jbGllbnQsIGFjdGl2ZW1xLXJhLCBhY3RpdmVtcS1q ZGJjLXN0b3JlIGFuZCBhY3RpdmVtcS1vcGVud2lyZS1sZWdhY3kuIFRoZSB3ZWIgY29uc29sZSBs aXZlcyBpbiBzZXBhcmF0ZSBhcnRpZmFjdHMgKGFjdGl2ZW1xLXdlYi1jb25zb2xlIC8gIGFjdGl2 ZW1xLXdlYiwgcGx1cyBKZXR0eSBhbmQgSm9sb2tpYSksIGFuZCBub25lIG9mIHRoZW0gYXJlIHBh cnQgb2YgYW55IFRvbUVFIGRpc3RyaWJ1dGlvbi4gVGhhdCBpcyBhbHNvIHdoeSB5b3UgY2Fubm90 IGZpbmQgYSBqZXR0eS1yZWFsbSBmaWxlOyB0aGVyZSBpcyBubyBKZXR0eSBpbiBUb21FRSBQbHVz Lg0KDQpUb21FRSBzdGFydHMgYW4gZW1iZWRkZWQgYnJva2VyIHRocm91Z2ggdGhlIEFjdGl2ZU1R IHJlc291cmNlIGFkYXB0ZXIuIFRoZSBkZWZhdWx0IGNvbmZpZ3VyYXRpb24gaXMNCg0KICBCcm9r ZXJYbWxDb25maWcgYnJva2VyOih0Y3A6Ly9sb2NhbGhvc3Q6NjE2MTYpP3VzZUpteD1mYWxzZQ0K DQogc28gb25seSBwb3J0IDYxNjE2IGlzIG9wZW5lZC4gQWRkaXRpb25hbGx5LCBUb21FRSdzIGJy b2tlciBmYWN0b3J5IGV4cGxpY2l0bHkgZGlzYWJsZXMgdGhlIEpNWCBjb25uZWN0b3IgKE1hbmFn ZW1lbnRDb250ZXh0LnNldENyZWF0ZUNvbm5lY3RvcihmYWxzZSkpLg0KDQpTbyBuZWl0aGVyIHRo ZSB3ZWIgY29uc29sZSBub3IgdGhlIEpNWC9Kb2xva2lhIGxheWVyIHRoZSBDVkUgcmVsaWVzIG9u IGV4aXN0cyBhdCBydW50aW1lIHdoaWNoIG1hdGNoZXMgeW91ciBjdXJsIHJlc3VsdCBvbiBwb3J0 IDgxNjEuDQoNClRvIGFuc3dlciB5b3VyIHF1ZXN0aW9uIGRpcmVjdGx5OiB5ZXMsIGluIGEgcHVy ZSBUb21FRSBQbHVzIGNvbnRleHQgdGhpcyBDVkUgaXMgYSBmYWxzZSBwb3NpdGl2ZSAuDQoNClRo ZSBvbmx5IHdheSB0byBiZSBleHBvc2VkIHdvdWxkIGJlIHRvIGRlbGliZXJhdGVseSBkZXBsb3kg dGhlIEFjdGl2ZU1RIFdlYiBDb25zb2xlIFdBUiB5b3Vyc2VsZiBpbnRvIFRvbUVFIGFuZCB3aXJl IGl0IHRvIHRoZSBlbWJlZGRlZCBicm9rZXIgd2hpY2ggaXMgbm90aGluZyBUb21FRSBkb2VzIG9y IGRvY3VtZW50cy4NCg0KDQpHcnXDnw0KUmljaGFyZA0KDQo+IEFtIDI4LjA1LjIwMjYgdW0gMTU6 MzMgc2NocmllYiBDT1VSVEFVTFQgRnJhbmNvaXMgPGZyYW5jb2lzLmNvdXJ0YXVsdEB0aGFsZXNn cm91cC5jb20+Og0KPg0KPiBUSEFMRVMgR1JPVVAgTElNSVRFRCBESVNUUklCVVRJT04gdG8gZW1h aWwgcmVjaXBpZW50cw0KPg0KPiBIZWxsbyBldmVyeW9uZSwNCj4NCj4gSSBwdXJzdWUgbXkgaW52 ZXN0aWdhdGlvbnMgYWJvdXQgdGhpcyBDVkUuDQo+IEZyb20gdGhlIGluZm9ybWF0aW9uIEkgZ290 IGZyb20gaW50ZXJuZXQsIG15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCBBY3RpdmVNUSBjb3VsZCBo YXZlIDIgcG9ydHMgb3BlbmVkOg0KPiAgICAgLSA4MTYxIGZvciB0aGUgQWN0aXZlTVEgY29uc29s ZQ0KPiAgICAgLSA2MTYxNiBmb3IgdGhlIG1lc3NhZ2UgYnJva2VyIGl0c2VsZg0KPg0KPiBJcyBt eSB1bmRlcnN0YW5kaW5nIGNvcnJlY3QgPw0KPg0KPiBNeSBUb21FRSBQbHVzIGlzIHJ1bm5pbmcg aW4gYSBjdXN0b20gRG9ja2VyIGNvbnRhaW5lci4NCj4gSWYgSSBlbnRlciBpbiB0aGlzIGNvbnRh aW5lciBhbmQgcGVyZm9ybSBhIGN1cmwgLXYgLUggJ0F1dGhvcml6YXRpb246IEJhc2ljIFlXUnRh VzQ2WVdSdGFXND0nIGh0dHA6Ly9sb2NhbGhvc3Q6ODE2MS9hZG1pbiwgSSBnZXQ6DQo+ICogICBU cnlpbmcgOjoxOjgxNjEuLi4NCj4gKiBjb25uZWN0IHRvIDo6MSBwb3J0IDgxNjEgZmFpbGVkOiBD b25uZWN0aW9uIHJlZnVzZWQNCj4gKiAgIFRyeWluZyAxMjcuMC4wLjE6ODE2MS4uLg0KPiAqIGNv bm5lY3QgdG8gMTI3LjAuMC4xIHBvcnQgODE2MSBmYWlsZWQ6IENvbm5lY3Rpb24gcmVmdXNlZCB3 aGljaA0KPiBtZWFucyB0aGF0IHRoZSBBY3RpdmVNUSBjb25zb2xlIGlzIG5vdCByZWFjaGFibGUu DQo+DQo+IE1vcmUgSSB0cnkgdG8gZmluZCBqZXR0eS1yZWFsIGZpbGUgYnV0IEkgY2FuJ3QgZmlu ZCBpdCBpbiBUb21FRSBQbHVzLg0KPg0KPiBTbyBhbGwgb2YgdGhlc2UgZXZpZGVuY2VzICBtYWtl IG1lIHRoaW5rIHRoYXQgQ1ZFLTIwMjYtMzQxOTcsIGluIGEgcHVyZSBUb21FRSBQbHVzIGNvbnRl eHQsIGlzIGEgZmFsc2UgcG9zaXRpdmUgYXMgdGhlIEFjdGl2ZU1RIGNvbnNvbGUgaXMgbm90IGRl cGxveWVkLg0KPiBEbyB5b3UgY29uZmlybSA/DQo+DQo+IEJlc3QgcmVnYXJkcy4NCj4NCj4gLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQ09VUlRBVUxUIEZyYW5jb2lzIDxmcmFu Y29pcy5jb3VydGF1bHRAdGhhbGVzZ3JvdXAuY29tPg0KPiBTZW50OiBtZXJjcmVkaSAyNyBtYWkg MjAyNiAxODo1Mw0KPiBUbzogdXNlcnNAdG9tZWUuYXBhY2hlLm9yZw0KPiBTdWJqZWN0OiBSRTog W0FOTk9VTkNFXSBBcGFjaGUgVG9tRUUgMTAuMS41DQo+DQo+IFRIQUxFUyBHUk9VUCBMSU1JVEVE IERJU1RSSUJVVElPTiB0byBlbWFpbCByZWNpcGllbnRzDQo+DQo+IEhlbGxvIGV2ZXJ5b25lLA0K Pg0KPiBGb3JnZXQgbXkgbGFzdCBwb3N0Lg0KPiBJZiBJIGxvb2sgYXQgQ1ZFLTIwMjYtMzQxOTcs ICBpdCByZXF1aXJlcyB1c2VyL3Bhc3N3b3JkIGF1dGhlbnRpY2F0aW9uIG9uIHRoZSBBY3RpdmVN USBjb25zb2xlIHVzaW5nIHRoZSBmb2xsb3dpbmcgVVJMOiBodHRwOi8vbG9jYWxob3N0OjgxNjEv YWRtaW4gYW5kIHRoZW4gYSBjYWxsIGh0dHA6Ly9sb2NhbGhvc3Q6ODE2MS9hcGkvam9sb2tpYS8u DQo+DQo+IEkgdGhpbmsgdGhhdCBpZiB3ZSB1c2UgYW55IEpNUyBBUElzIGluIG91ciBjb2RlLCBB Y3RpdmVNUSB3aWxsIGJlIHN0YXJ0ZWQsIHJpZ2h0ID8NCj4NCj4gVGhlIHF1ZXN0aW9uIGlzOiBk b2VzIHRoZSBBY3RpdmVNUSBjb25zb2xlIHN0YXJ0IGFzIHdlbGwgPw0KPiBJZiB5ZXMsIGlzIHRo ZXJlIGEgd2F5IHRvIGZvcmJpZCB0aGUgcGF0aCBhcGkvam9sb2tpYSBhY2Nlc3MgPw0KPg0KPiBC ZXN0IFJlZ2FyZHMuDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IENP VVJUQVVMVCBGcmFuY29pcyA8ZnJhbmNvaXMuY291cnRhdWx0QHRoYWxlc2dyb3VwLmNvbT4NCj4g U2VudDogbWVyY3JlZGkgMjcgbWFpIDIwMjYgMTg6MjINCj4gVG86IHVzZXJzQHRvbWVlLmFwYWNo ZS5vcmcNCj4gU3ViamVjdDogUkU6IFtBTk5PVU5DRV0gQXBhY2hlIFRvbUVFIDEwLjEuNQ0KPg0K PiBUSEFMRVMgR1JPVVAgTElNSVRFRCBESVNUUklCVVRJT04gdG8gZW1haWwgcmVjaXBpZW50cw0K Pg0KPiBIZWxsbyBSaWNoYXJkLA0KPg0KPiBJZiBJIGxvb2sgYXQgQ1ZFLTIwMjYtMzQxOTcsICBp dCByZXF1aXJlcyB1c2VyL3Bhc3N3b3JkIGF1dGhlbnRpY2F0aW9uIHVzaW5nIHRoZSBmb2xsb3dp bmcgVVJMOiBodHRwOi8vbG9jYWxob3N0OjgxNjEvYWRtaW4gYW5kIHRoZW4gYSBjYWxsIGh0dHA6 Ly9sb2NhbGhvc3Q6ODE2MS9hcGkvam9sb2tpYS8uDQo+DQo+IEJ1dCBpdCBzZWVtcyB0aGF0IFRv bUVFIDEwLjAuMSBkb2Vzbid0IHN0YXJ0IHRoZSBBY3RpdmVNUSBjb25zb2xlLiBTbywgdGhpcyBD VkUgaXMgbm90IHByZXNlbnQgaW4gVG9tRUUsIHJpZ2h0ID8NCj4NCj4gSXMgdGhlcmUgYSB3YXks IHVzaW5nIFRvbUVFLCB0byBzdGFydCB0aGUgQWN0aXZlTVEgY29uc29sZSA/DQo+IElmIHRoZXJl IGlzIG5vbmUgdGhlbiBUb21FRSBpc24ndCBhZmZlY3RlZCBieSB0aGlzIENWRSwgcmlnaHQgPw0K Pg0KPiBCZXN0IFJlZ2FyZHMuDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZy b206IFJpY2hhcmQgWm93YWxsYSA8cnpvMUBhcGFjaGUub3JnPg0KPiBTZW50OiBtYXJkaSA1IG1h aSAyMDI2IDEyOjMyDQo+IFRvOiB1c2Vyc0B0b21lZS5hcGFjaGUub3JnDQo+IFN1YmplY3Q6IFJl OiBbQU5OT1VOQ0VdIEFwYWNoZSBUb21FRSAxMC4xLjUNCj4NCj4gSnVzdCByZXBsYWNlIHRoZSBy ZWxhdGVkIGphciBmaWxlcyBpbiB0aGUgZGlzdHJpYnV0aW9uLg0KPg0KPj4gQW0gMDUuMDUuMjAy NiB1bSAxMjoyNyBzY2hyaWViIENPVVJUQVVMVCBGcmFuY29pcyA8ZnJhbmNvaXMuY291cnRhdWx0 QHRoYWxlc2dyb3VwLmNvbT46DQo+Pg0KPj4gVEhBTEVTIEdST1VQIExJTUlURUQgRElTVFJJQlVU SU9OIHRvIGVtYWlsIHJlY2lwaWVudHMNCj4+DQo+PiBIZWxsbywNCj4+DQo+PiBDb25ncmF0cyBm b3IgdGhpcyBuZXcgcmVsZWFzZSDwn5iKDQo+Pg0KPj4gUmVnYXJkaW5nIEFjdGl2ZU1RLCBJIGFn cmVlIHRoYXQgQWN0aXZlTVEgNi4yLjUgaGFzIGJlZW4gcmVsZWFzZWQgMTUgZGF5cyBhZnRlciA2 LjIuNCBzbyBxdWl0ZSBkaWZmaWN1bHQgdG8gaW50ZWdyYXRlIGluIFRvbUVFIDEwLjEuNS4NCj4+ IERvIHlvdSB0aGluayB0aGVyZSBpcyBoaWdoIHJpc2sgaWYgSSB1cGRhdGUgQWN0aXZlTVEgdG8g Ni4yLjUgaW5zdGVhZCBvZiA2LjIuNCAoNyBqYXJzIHRvIHVwZGF0ZSkgPw0KPj4NCj4+IFdoeSBu b3QgaW50ZWdyYXRpbmcgbmVldGhpIDMuMi4yIGluc3RlYWQgb2YgbmVldGhpIDMuMi4xIHdoaWNo IGZpeGVzIDEgY3JpdGljYWwgQ1ZFOiBDVkUtMjAyNi00MjQwMyA/IElzIGl0IGJlY2F1c2UgaXQg aGFzbid0IGJlZW4gdGFnIGFzIExhdGVzdCA/IFNhbWUgcXVlc3Rpb246IGhpZ2ggcmlzayBpZiBJ IHVwZGF0ZSAgbmVldGhpIDMuMi4xIGJ5IG5lZXRoaSAzLjIuMiA/DQo+Pg0KPj4gQmVzdCBSZWdh cmRzLg0KPj4NCj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+PiBGcm9tOiBNYXJrdXMg SnVuZyA8anVuZ21AYXBhY2hlLm9yZz4NCj4+IFNlbnQ6IG1hcmRpIDUgbWFpIDIwMjYgMTA6MzAN Cj4+IFRvOiBkZXZAdG9tZWUuYXBhY2hlLm9yZzsgdXNlcnNAdG9tZWUuYXBhY2hlLm9yZzsgYW5u b3VuY2VAYXBhY2hlLm9yZw0KPj4gU3ViamVjdDogW0FOTk9VTkNFXSBBcGFjaGUgVG9tRUUgMTAu MS41DQo+Pg0KPj4gVGhlIEFwYWNoZSBUb21FRSB0ZWFtIGlzIHBsZWFzZWQgdG8gYW5ub3VuY2Ug dGhlIGdlbmVyYWwgYXZhaWxhYmlsaXR5DQo+PiBvZiBUb21FRSAxMC4xLjUNCj4+DQo+PiBBcGFj aGUgVG9tRUUgZGVsaXZlcnMgZW50ZXJwcmlzZSBhcHBsaWNhdGlvbiBjb250YWluZXJzIGFuZCBz ZXJ2aWNlcyBiYXNlZCBvbiwgYnV0IG5vdCBsaW1pdGVkIHRvIHRoZSBFbnRlcnByaXNlIEphdmFC ZWFucyBTcGVjaWZpY2F0aW9uIGFuZCBKYXZhL0pha2FydGEgRW50ZXJwcmlzZSBFZGl0aW9uIFNw ZWNpZmljYXRpb25zLg0KPj4NCj4+IFRoaXMgcmVsZWFzZSBzaGlwcyBmaXhlcyByZWxhdGVkIHRv IHRoZSBpbXBsZW1lbnRhdGlvbiBvZiB0aGUgQE9wZW5JZEF1dGhlbnRpY2F0aW9uTWVjaGFuaXNt RGVmaW5pdGlvbiwgZml4ZXMgYW4gaXNzdWUgd2l0aCByZXNvdXJjZSBjb25zdHJ1Y3Rpb24sIGhh cyBhIHNtYWxsIGltcHJvdmVtZW50IGluIGxvZ2dpbmcsIGFuZCBmZWF0dXJlcyB0aGUgdXN1YWwg ZGVwZW5kZW5jeSB1cGdyYWRlcy4NCj4+DQo+PiBGdWxsIHJlbGVhc2Ugbm90ZXM6DQo+PiBodHRw czovL3RvbWVlLmFwYWNoZS5vcmcvMTAuMS41L3JlbGVhc2Utbm90ZXMuaHRtbA0KPj4NCj4+IERv d25sb2FkcyBhcmUgYXZhaWxhYmxlIGF0OiBodHRwczovL3RvbWVlLmFwYWNoZS5vcmcvZG93bmxv YWQuaHRtbA0KPj4NCj4+IC0gVGhlIEFwYWNoZSBUb21FRSBUZWFtDQo+Pg0KPj4NCj4NCj4NCj4N Cj4NCg0KDQo=