Skip to content
OpenAdvisories
Critical RHSA-2025:0371 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update

Published Jan 17, 2025 · Updated Sep 15, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-eap-product-conf-parent 0:800.5.1-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-eap-product-conf-wildfly-ee-feature-pack 0:800.5.1-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-hornetq 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-hornetq-commons 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-hornetq-core-client 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-hornetq-jakarta-client 0:2.4.11-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-jgroups 1:5.2.23-2.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly 0:8.0.5-5.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk11 0:8.0.5-5.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk17 0:8.0.5-5.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk21 0:8.0.5-5.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-modules 0:8.0.5-5.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-parent 0:800.5.1-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-wildfly-ee-feature-pack 0:800.5.1-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-commons 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-core-client 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-hornetq-jakarta-client 0:2.4.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-jgroups 1:5.2.23-2.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly 0:8.0.5-5.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk11 0:8.0.5-5.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk17 0:8.0.5-5.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk21 0:8.0.5-5.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-modules 0:8.0.5-5.GA_redhat_00004.1.el9eap

Vulnerabilities 1

  • Critical 9.1
    CVE-2024-51127

    hornetq vulnerable to file overwrite, sensitive information disclosure

    An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

    org.hornetq:hornetq-core-client Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/8.0/
  • article
    https://access.redhat.com/articles/7100137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323697
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0371.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-51127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-51127
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-51127
  • article
    http://hornetq.com
  • article
    https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md