Skip to content
OpenAdvisories
Critical RHSA-2024:7811 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 Security update

Published Oct 8, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el7 eap7-avro 0:1.11.4-1.redhat_00001.1.el7eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-avro 0:1.11.4-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el9 eap7-avro 0:1.11.4-1.redhat_00001.1.el9eap

Vulnerabilities 1

  • Critical 9.2
    CVE-2024-47561

    Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

    Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

    Apache Software Foundation Apache Avro Java SDK druid trino Wolfi Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2316116
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7811.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-47561
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47561
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47561