Skip to content
OpenAdvisories
Critical RHSA-2024:11560 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.5 Security update

Published Dec 20, 2024 · Updated Sep 15, 2026

Ecosystem: Red Hat

Fixed packages 109

ReleasePackageFixed in
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-cli 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-commons 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-core-client 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-dto 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-hornetq-protocol 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-hqclient-protocol 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-jakarta-client 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-jakarta-ra 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-jakarta-server 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-jakarta-service-extensions 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-jdbc-store 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-journal 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-selector 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-activemq-artemis-server 0:2.33.0-2.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-angus-activation 0:2.0.2-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-apache-commons-lang 0:3.14.0-3.redhat_00007.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-atinject 0:2.0.1-3.redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-azure-storage 0:8.6.6-4.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-commons-logging-jboss-logging 0:1.0.0-2.Final_redhat_1.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-parent 0:800.5.0-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-wildfly-ee-feature-pack 0:800.5.0-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-ecj 1:3.31.0-2.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-expressly 0:5.0.0-5.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hal-console 0:3.6.20-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hibernate 0:6.2.32-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hibernate-core 0:6.2.32-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hibernate-envers 0:6.2.32-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq 0:2.4.10-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-commons 0:2.4.10-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-core-client 0:2.4.10-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-jakarta-client 0:2.4.10-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-activation 0:2.1.3-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-authentication 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-authorization 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-client-resteasy 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-client-webservices 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-security 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jakarta-xml-bind-api 0:4.0.2-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jansi 0:1.18.0-2.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-javaee-security-soteria 0:3.0.0-3.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-javaee-security-soteria-enterprise 0:3.0.0-3.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-ejb-client 0:5.0.8-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-marshalling 0:2.1.6-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-marshalling-river 0:2.1.6-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-remoting 0:5.0.30-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-weld-api 0:5.0.0-4.SP3_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-weld-api-weld-api 0:5.0.0-4.SP3_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jboss-weld-api-weld-spi 0:5.0.0-4.SP3_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jbossws-cxf 0:7.3.0-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jctools 0:4.0.5-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jctools-core 0:4.0.5-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jsonb-spec 0:3.0.1-1.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-jbosstxbridge 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-jbossxts 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-jts-idlj 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-jts-integration 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-restat-api 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-restat-bridge 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-restat-integration 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-narayana-restat-util 0:6.0.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-buffer 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-dns 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-http 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-socks 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-common 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-handler 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-handler-proxy 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-resolver 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-resolver-dns 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-classes-epoll 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-epoll 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-epoll-debuginfo 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-unix-common 0:4.1.114-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-parsson 0:1.1.7-1.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-atom-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-cdi 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-client 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-client-api 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-core 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-core-spi 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-crypto 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-jackson2-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-jaxb-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-jsapi 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-json-binding-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-json-p-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-multipart-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-rxjava2 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-resteasy-validator-provider 0:6.2.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-undertow 0:2.3.18-1.SP1_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-undertow-jastow 0:2.2.8-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-vdx 0:1.1.6-3.redhat_1.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-vdx-core 0:1.1.6-3.redhat_1.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-vdx-wildfly 0:1.1.6-3.redhat_1.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly 0:8.0.5-3.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-elytron 0:2.2.7-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-elytron-ee 0:3.0.3-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-elytron-tool 0:2.2.7-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk11 0:8.0.5-3.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk17 0:8.0.5-3.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk21 0:8.0.5-3.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-modules 0:8.0.5-3.GA_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-yasson 0:3.0.4-1.redhat_00002.1.el9eap

Vulnerabilities 2

  • Critical 9.1
    CVE-2024-51127

    hornetq vulnerable to file overwrite, sensitive information disclosure

    An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

    org.hornetq:hornetq-core-client Maven
  • Unscored —
    CVE-2024-4109 Rejected

    Red Hat Product Security has determined that this CVE is not a security vulnerability.

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2272325
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323697
  • article
    https://issues.redhat.com/browse/JBEAP-27429
  • article
    https://issues.redhat.com/browse/JBEAP-27430
  • article
    https://issues.redhat.com/browse/JBEAP-27443
  • article
    https://issues.redhat.com/browse/JBEAP-27451
  • article
    https://issues.redhat.com/browse/JBEAP-27452
  • article
    https://issues.redhat.com/browse/JBEAP-27646
  • article
    https://issues.redhat.com/browse/JBEAP-27662
  • article
    https://issues.redhat.com/browse/JBEAP-27731
  • article
    https://issues.redhat.com/browse/JBEAP-27894
  • article
    https://issues.redhat.com/browse/JBEAP-27895
  • article
    https://issues.redhat.com/browse/JBEAP-27941
  • article
    https://issues.redhat.com/browse/JBEAP-28024
  • article
    https://issues.redhat.com/browse/JBEAP-28026
  • article
    https://issues.redhat.com/browse/JBEAP-28037
  • article
    https://issues.redhat.com/browse/JBEAP-28046
  • article
    https://issues.redhat.com/browse/JBEAP-28139
  • article
    https://issues.redhat.com/browse/JBEAP-28140
  • article
    https://issues.redhat.com/browse/JBEAP-28211
  • article
    https://issues.redhat.com/browse/JBEAP-28248
  • article
    https://issues.redhat.com/browse/JBEAP-28265
  • article
    https://issues.redhat.com/browse/JBEAP-28288
  • article
    https://issues.redhat.com/browse/JBEAP-28325
  • article
    https://issues.redhat.com/browse/JBEAP-28336
  • article
    https://issues.redhat.com/browse/JBEAP-28337
  • article
    https://issues.redhat.com/browse/JBEAP-28338
  • article
    https://issues.redhat.com/browse/JBEAP-28378
  • article
    https://issues.redhat.com/browse/JBEAP-28386
  • article
    https://issues.redhat.com/browse/JBEAP-28541
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11560.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-4109
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4109
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4109
  • article
    https://github.com/undertow-io/undertow/pull/1668#
  • report
    https://access.redhat.com/security/cve/CVE-2024-51127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-51127