Fixed packages 52
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-artemis-wildfly-integration | 0:2.0.3-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-azure-storage | 0:8.6.6-5.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-eap-product-conf-parent | 0:800.6.0-2.GA_redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-eap-product-conf-wildfly-ee-feature-pack | 0:800.6.0-2.GA_redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-gnu-getopt | 0:1.0.13-2.redhat_5.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-h2database | 0:2.1.214-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-hal-console | 0:3.6.23-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-hibernate-commons-annotations | 0:6.0.6-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jackson-coreutils | 0:1.8.0-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-authentication-api | 0:3.0.0-3.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-authorization-api | 0:2.1.0-3.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-enterprise-cdi-api | 0:4.0.1-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-enterprise-concurrent | 0:3.0.0-4.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-enterprise-concurrent-api | 0:3.0.2-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-enterprise-lang-model | 0:4.0.1-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-security-enterprise-api | 0:3.0.0-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jakarta-servlet-jsp-api | 0:3.1.0-3.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-javaewah | 0:1.1.13-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-aesh | 0:2.4.0-2.redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-common-beans | 0:2.0.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-dmr | 0:1.6.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-ejb3-ext-api | 0:2.3.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-el-api_5.0_spec | 0:4.0.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-genericjms | 0:3.0.0-3.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-iiop-client | 0:2.0.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-invocation | 0:2.0.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-logmanager | 0:2.1.19-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-msc | 0:1.5.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-remoting-jmx | 0:3.0.4-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-stdio | 0:1.1.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-threads | 0:2.4.0-3.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-transaction-spi | 0:8.0.0-3.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jboss-vfs | 0:3.3.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jbossws-api | 0:3.0.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jbossws-common | 0:5.1.0-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jbossws-cxf | 0:7.3.1-1.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jbossws-spi | 0:5.0.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jcip-annotations | 0:1.0.0-2.redhat_8.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-json-patch | 0:1.9.0-2.redhat_00002.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-jul-to-slf4j-stub | 0:1.0.1-2.Final_redhat_3.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-reactivex-rxjava2 | 0:2.2.21-2.redhat_00001.2.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-slf4j-jboss-logmanager | 0:2.0.1-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-staxmapper | 0:1.4.0-2.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly | 0:8.0.6-5.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-common | 0:1.6.0-4.Final_redhat_00001.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk11 | 0:8.0.6-5.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk17 | 0:8.0.6-5.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-java-jdk21 | 0:8.0.6-5.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-wildfly-modules | 0:8.0.6-5.GA_redhat_00004.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-woodstox-core | 0:6.4.0-3.redhat_00003.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-xml-commons-resolver | 0:1.2.0-3.redhat_12.1.el8eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 | eap8-xml-resolver | 0:1.2.0-3.redhat_12.1.el8eap |
Vulnerabilities 1
-
Medium 6.1
Wildfly: wildfly vulnerable to cross-site scripting (xss)
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
-
article
https://access.redhat.com/articles/7100706
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2320848
-
article
https://issues.redhat.com/browse/JBEAP-27764
-
article
https://issues.redhat.com/browse/JBEAP-28389
-
article
https://issues.redhat.com/browse/JBEAP-28402
-
article
https://issues.redhat.com/browse/JBEAP-28774
-
article
https://issues.redhat.com/browse/JBEAP-28836
-
article
https://issues.redhat.com/browse/JBEAP-28845
-
article
https://issues.redhat.com/browse/JBEAP-28880
-
article
https://issues.redhat.com/browse/JBEAP-29009
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2025.json
-
report
https://access.redhat.com/security/cve/CVE-2024-10234
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-10234
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-10234