Fixed packages 112
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-apache-cxf | 0:4.0.9-5.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-apache-cxf-rt | 0:4.0.9-5.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-apache-cxf-services | 0:4.0.9-5.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-apache-cxf-tools | 0:4.0.9-5.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-apache-cxf-xjc-utils | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-cxf-xjc-boolean | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-cxf-xjc-bug986 | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-cxf-xjc-dv | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-cxf-xjc-runtime | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-cxf-xjc-ts | 0:4.1.0-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-eap-product-conf-parent | 0:800.9.1-3.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-eap-product-conf-wildfly-ee-feature-pack | 0:800.9.1-3.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jbossws-cxf | 0:7.3.4-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-buffer | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-codec | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-codec-dns | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-codec-http | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-codec-socks | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-common | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-handler | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-handler-proxy | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-resolver | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-resolver-dns | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-transport | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-transport-classes-epoll | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-transport-native-epoll | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-transport-native-epoll-debuginfo | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-netty-transport-native-unix-common | 0:4.1.127-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-core | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-profile-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-saml-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-saml-impl | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-security-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-security-impl | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-soap-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xacml-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xacml-impl | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xacml-saml-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xacml-saml-impl | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xmlsec-api | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-opensaml-xmlsec-impl | 0:4.3.2-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly | 0:8.0.9-8.GA_redhat_00008.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk11 | 0:8.0.9-8.GA_redhat_00008.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk17 | 0:8.0.9-8.GA_redhat_00008.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk21 | 0:8.0.9-8.GA_redhat_00008.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-modules | 0:8.0.9-8.GA_redhat_00008.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-bindings | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-policy | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-ws-security-common | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-ws-security-dom | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-ws-security-policy-stax | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wss4j-ws-security-stax | 0:3.0.4-1.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-xml-security | 0:3.0.5-1.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-apache-cxf | 0:4.0.9-5.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-apache-cxf-rt | 0:4.0.9-5.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-apache-cxf-services | 0:4.0.9-5.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-apache-cxf-tools | 0:4.0.9-5.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-apache-cxf-xjc-utils | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-cxf-xjc-boolean | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-cxf-xjc-bug986 | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-cxf-xjc-dv | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-cxf-xjc-runtime | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-cxf-xjc-ts | 0:4.1.0-1.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-eap-product-conf-parent | 0:800.9.1-3.GA_redhat_00004.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-eap-product-conf-wildfly-ee-feature-pack | 0:800.9.1-3.GA_redhat_00004.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-jbossws-cxf | 0:7.3.4-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-buffer | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-codec | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-codec-dns | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-codec-http | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-codec-socks | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-common | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-handler | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-handler-proxy | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-resolver | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-resolver-dns | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-transport | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-transport-classes-epoll | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-transport-native-epoll | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-transport-native-epoll-debuginfo | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-netty-transport-native-unix-common | 0:4.1.127-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-core | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-profile-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-saml-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-saml-impl | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-security-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-security-impl | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-soap-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xacml-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xacml-impl | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xacml-saml-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xacml-saml-impl | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xmlsec-api | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-opensaml-xmlsec-impl | 0:4.3.2-2.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wildfly | 0:8.0.9-8.GA_redhat_00008.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wildfly-java-jdk11 | 0:8.0.9-8.GA_redhat_00008.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wildfly-java-jdk17 | 0:8.0.9-8.GA_redhat_00008.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wildfly-java-jdk21 | 0:8.0.9-8.GA_redhat_00008.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wildfly-modules | 0:8.0.9-8.GA_redhat_00008.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-bindings | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-policy | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-ws-security-common | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-ws-security-dom | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-ws-security-policy-stax | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-wss4j-ws-security-stax | 0:3.0.4-1.redhat_00002.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 | eap8-xml-security | 0:3.0.5-1.redhat_00001.1.el9eap |
Vulnerabilities 3
-
Critical 9.8
Apache CXF: Untrusted JMS configuration can lead to RCE
If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are re…
-
High 8.2CVE-2025-55163 Public exploit
Netty MadeYouReset HTTP/2 DDoS Vulnerability
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …
-
Low 2.9
Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline ch…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
-
article
https://access.redhat.com/articles/7131053
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2387221
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2388252
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2392996
-
article
https://issues.redhat.com/browse/JBEAP-30702
-
article
https://issues.redhat.com/browse/JBEAP-30733
-
article
https://issues.redhat.com/browse/JBEAP-30757
-
article
https://issues.redhat.com/browse/JBEAP-30758
-
article
https://issues.redhat.com/browse/JBEAP-30760
-
article
https://issues.redhat.com/browse/JBEAP-30762
-
article
https://issues.redhat.com/browse/JBEAP-30886
-
article
https://issues.redhat.com/browse/JBEAP-30888
-
article
https://issues.redhat.com/browse/JBEAP-30890
-
article
https://issues.redhat.com/browse/JBEAP-30917
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17317.json
-
report
https://access.redhat.com/security/cve/CVE-2025-48913
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-48913
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48913
-
article
https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83
-
report
https://access.redhat.com/security/cve/CVE-2025-55163
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55163
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55163
-
article
https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4
-
article
https://kb.cert.org/vuls/id/767506
-
report
https://access.redhat.com/security/cve/CVE-2025-58056
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-58056
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-58056
-
article
https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding
-
article
https://github.com/JLLeitschuh/unCVEed/issues/1
-
article
https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284
-
article
https://github.com/netty/netty/issues/15522
-
article
https://github.com/netty/netty/pull/15611
-
article
https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49
-
article
https://w4ke.info/2025/06/18/funky-chunks.html