Skip to content
OpenAdvisories
Medium RHSA-2025:22188 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.2 Security update

Published Nov 27, 2025 · Updated Oct 17, 2026

Fixed packages 109

ReleasePackageFixed in
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-cli 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-commons 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-core-client 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-dto 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-hornetq-protocol 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-hqclient-protocol 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-jakarta-client 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-jakarta-ra 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-jakarta-server 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-jakarta-service-extensions 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-jdbc-store 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-journal 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-selector 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-activemq-artemis-server 0:2.40.0-3.redhat_00008.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-angus-activation 0:2.0.2-2.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-antlr4 0:4.13.2-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-antlr4-runtime 0:4.13.2-1.redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-apache-commons-io 0:2.16.1-2.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-apache-commons-lang 0:3.18.0-2.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-atinject 0:2.0.1-5.redhat_00007.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-eap-product-conf-parent 0:801.2.0-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-eap-product-conf-wildfly-ee-feature-pack 0:801.2.0-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-eclipse-jgit 0:6.10.1.202505221210-1.r_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hal-console 0:3.7.16-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate 0:6.6.31-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-core 0:6.6.31-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-envers 0:6.6.31-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-backend-elasticsearch 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-backend-lucene 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-engine 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-mapper-orm 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-mapper-pojo-base 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-hibernate-search-util-common 0:7.2.4-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-httpcomponents-client 0:4.5.14-5.redhat_00016.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-httpcomponents-core 0:4.4.16-6.redhat_00011.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cachestore-jdbc 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cachestore-jdbc-common 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cachestore-remote 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cdi-common 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cdi-embedded 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-cdi-remote 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-client-hotrod 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-clustered-counter 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-clustered-lock 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-commons 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-core 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-hibernate-cache-commons 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-hibernate-cache-spi 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-hibernate-cache-v62 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-objectfilter 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-query 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-query-core 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-query-dsl 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-infinispan-remote-query-client 0:15.0.21-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-activation 0:2.1.3-2.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-annotation-api 0:2.1.1-5.redhat_00005.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-interceptor-api 0:2.1.0-5.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-mail 0:2.1.3-3.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-servlet-api 0:6.0.0-6.redhat_00007.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-validation-api 0:3.0.2-3.redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-ws-rs-api 0:3.1.0-5.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jakarta-xml-bind-api 0:4.0.2-2.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jbossws-cxf 0:7.3.6-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jctools 0:4.0.5-3.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jctools-core 0:4.0.5-3.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-jgroups 1:5.3.21-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-objectweb-asm 0:9.7.1-3.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-objectweb-asm-util 0:9.7.1-3.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-parsson 0:1.1.7-3.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-reactive-streams 0:1.0.4-4.redhat_00005.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-reactivex-rxjava2 0:2.2.21-4.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-saaj-impl 0:3.0.4-2.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-snakeyaml 0:2.3.0-1.redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-stax-ex 0:2.1.0-3.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-stax2-api 0:4.2.2-2.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly 0:8.1.2-1.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-cache-infinispan-common 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-cache-infinispan-embedded 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-cache-infinispan-remote 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-cache-spi 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-context 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-marshalling-jboss 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-marshalling-protostream 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-marshalling-spi 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-server-api 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-server-infinispan 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-server-jgroups 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-server-local 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-server-spi 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-cache 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-infinispan-embedded 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-infinispan-remote 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-spec-servlet-6.0 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-spec-spi 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-clustering-session-spi 0:5.0.11-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-client 0:2.1.3-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-client-common 0:2.1.3-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-ejb-client 0:2.1.3-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-naming-client 0:2.1.3-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-http-transaction-client 0:2.1.3-1.Final_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-java-jdk17 0:8.1.2-1.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-java-jdk21 0:8.1.2-1.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-javadocs 0:8.1.1-2.GA_redhat_00006.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-wildfly-modules 0:8.1.2-1.GA_redhat_00004.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 eap8-yasson 0:3.0.4-2.redhat_00004.1.el9eap

Vulnerabilities 1

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1
  • article
    https://access.redhat.com/articles/7133099
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367730
  • article
    https://issues.redhat.com/browse/JBEAP-30670
  • article
    https://issues.redhat.com/browse/JBEAP-30737
  • article
    https://issues.redhat.com/browse/JBEAP-30753
  • article
    https://issues.redhat.com/browse/JBEAP-30856
  • article
    https://issues.redhat.com/browse/JBEAP-30951
  • article
    https://issues.redhat.com/browse/JBEAP-31005
  • article
    https://issues.redhat.com/browse/JBEAP-31020
  • article
    https://issues.redhat.com/browse/JBEAP-31032
  • article
    https://issues.redhat.com/browse/JBEAP-31042
  • article
    https://issues.redhat.com/browse/JBEAP-31043
  • article
    https://issues.redhat.com/browse/JBEAP-31044
  • article
    https://issues.redhat.com/browse/JBEAP-31047
  • article
    https://issues.redhat.com/browse/JBEAP-31048
  • article
    https://issues.redhat.com/browse/JBEAP-31054
  • article
    https://issues.redhat.com/browse/JBEAP-31059
  • article
    https://issues.redhat.com/browse/JBEAP-31095
  • article
    https://issues.redhat.com/browse/JBEAP-31105
  • article
    https://issues.redhat.com/browse/JBEAP-31106
  • article
    https://issues.redhat.com/browse/JBEAP-31113
  • article
    https://issues.redhat.com/browse/JBEAP-31125
  • article
    https://issues.redhat.com/browse/JBEAP-31274
  • article
    https://issues.redhat.com/browse/JBEAP-31291
  • article
    https://issues.redhat.com/browse/JBEAP-31315
  • article
    https://issues.redhat.com/browse/JBEAP-31323
  • article
    https://issues.redhat.com/browse/JBEAP-31338
  • article
    https://issues.redhat.com/browse/JBEAP-31340
  • article
    https://issues.redhat.com/browse/JBEAP-31346
  • article
    https://issues.redhat.com/browse/JBEAP-31354
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22188.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-4949
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-4949
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-4949
  • article
    https://gitlab.eclipse.org/security/cve-assignement/-/issues/64
  • article
    https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281
  • article
    https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1