Skip to content
OpenAdvisories
Unscored RHSA-2024:10928 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.20 Security update

Published Dec 18, 2024 · Updated May 1, 2026

Ecosystem: Red Hat

Fixed packages 59

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-cli 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-commons 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-core-client 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-dto 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-hornetq-protocol 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-hqclient-protocol 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-jdbc-store 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-jms-client 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-jms-server 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-journal 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-ra 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-selector 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-server 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-service-extensions 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-activemq-artemis-tools 0:2.16.0-19.redhat_00053.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-byte-buddy 0:1.11.12-3.redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jaxen 0:1.1.6-15.redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jboss-ejb-client 0:4.0.56-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jboss-remoting 0:5.0.30-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jboss-server-migration 0:1.10.0-40.Final_redhat_00040.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jboss-server-migration-cli 0:1.10.0-40.Final_redhat_00040.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jboss-server-migration-core 0:1.10.0-40.Final_redhat_00040.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jbossws-cxf 0:5.4.13-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-log4j-jboss-logmanager 0:1.3.1-2.Final_redhat_00003.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-picketlink-bindings 0:2.5.5-28.SP12_redhat_00017.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-picketlink-wildfly8 0:2.5.5-28.SP12_redhat_00017.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-atom-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-cdi 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-client 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-crypto 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jackson-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jackson2-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jaxb-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jaxrs 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jettison-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jose-jwt 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-jsapi 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-json-binding-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-json-p-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-multipart-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-rxjava2 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-spring 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-validator-provider-11 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-resteasy-yaml-provider 0:3.15.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-undertow 0:2.2.37-1.SP2_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-http-client 0:1.1.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-http-client-common 0:1.1.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-http-ejb-client 0:1.1.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-http-naming-client 0:1.1.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-http-transaction-client 0:1.1.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk11 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk17 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk8 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-javadocs 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-modules 0:7.4.20-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-woodstox-core 0:6.4.0-2.redhat_00003.1.el8eap

Vulnerabilities 1

  • Unscored —
    CVE-2024-4109 Rejected

    Red Hat Product Security has determined that this CVE is not a security vulnerability.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272325
  • article
    https://issues.redhat.com/browse/JBEAP-27638
  • article
    https://issues.redhat.com/browse/JBEAP-27647
  • article
    https://issues.redhat.com/browse/JBEAP-28050
  • article
    https://issues.redhat.com/browse/JBEAP-28107
  • article
    https://issues.redhat.com/browse/JBEAP-28132
  • article
    https://issues.redhat.com/browse/JBEAP-28183
  • article
    https://issues.redhat.com/browse/JBEAP-28192
  • article
    https://issues.redhat.com/browse/JBEAP-28238
  • article
    https://issues.redhat.com/browse/JBEAP-28263
  • article
    https://issues.redhat.com/browse/JBEAP-28267
  • article
    https://issues.redhat.com/browse/JBEAP-28268
  • article
    https://issues.redhat.com/browse/JBEAP-28270
  • article
    https://issues.redhat.com/browse/JBEAP-28277
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10928.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-4109
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4109
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4109
  • article
    https://github.com/undertow-io/undertow/pull/1668#