Skip to content
OpenAdvisories
Critical RHSA-2025:1637 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update

Published Feb 19, 2025 · Updated Sep 15, 2026

Ecosystem: Red Hat

Fixed packages 29

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hal-console 0:3.3.25-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hibernate 0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hibernate-core 0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hibernate-entitymanager 0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hibernate-envers 0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-hibernate-java8 0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jbossws-common 0:3.4.0-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-jbossws-cxf 0:5.4.14-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-core 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-profile-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-saml-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-saml-impl 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-security-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-security-impl 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-soap-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xacml-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xacml-impl 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xacml-saml-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xacml-saml-impl 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xmlsec-api 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-opensaml-xmlsec-impl 0:3.4.6-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk11 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk17 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-java-jdk8 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-javadocs 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-wildfly-modules 0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.4::el8 eap7-xml-security 0:2.3.5-1.redhat_00001.1.el8eap

Vulnerabilities 1

  • Critical 9.1
    CVE-2024-51127

    hornetq vulnerable to file overwrite, sensitive information disclosure

    An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.

    org.hornetq:hornetq-core-client Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2323697
  • article
    https://issues.redhat.com/browse/JBEAP-27610
  • article
    https://issues.redhat.com/browse/JBEAP-28234
  • article
    https://issues.redhat.com/browse/JBEAP-28359
  • article
    https://issues.redhat.com/browse/JBEAP-28587
  • article
    https://issues.redhat.com/browse/JBEAP-28691
  • article
    https://issues.redhat.com/browse/JBEAP-28729
  • article
    https://issues.redhat.com/browse/JBEAP-28730
  • article
    https://issues.redhat.com/browse/JBEAP-29200
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1637.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-51127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-51127
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-51127
  • article
    http://hornetq.com
  • article
    https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md