Skip to content
OpenAdvisories
High RHSA-2025:3357 4 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update

Published Mar 28, 2025 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 50

ReleasePackageFixed in
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-eap-product-conf-parent 0:800.6.1-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-eap-product-conf-wildfly-ee-feature-pack 0:800.6.1-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-buffer 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-codec 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-codec-dns 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-codec-http 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-codec-socks 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-common 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-handler 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-handler-proxy 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-resolver 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-resolver-dns 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-transport 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-transport-classes-epoll 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-transport-native-epoll 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-transport-native-epoll-debuginfo 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-netty-transport-native-unix-common 0:4.1.119-1.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-slf4j 0:2.0.16-2.redhat_00003.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-slf4j-api 0:2.0.16-2.redhat_00003.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly 0:8.0.6-15.GA_redhat_00009.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk11 0:8.0.6-15.GA_redhat_00009.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk17 0:8.0.6-15.GA_redhat_00009.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-java-jdk21 0:8.0.6-15.GA_redhat_00009.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el8 eap8-wildfly-modules 0:8.0.6-15.GA_redhat_00009.1.el8eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-parent 0:800.6.1-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-eap-product-conf-wildfly-ee-feature-pack 0:800.6.1-1.GA_redhat_00001.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-buffer 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-dns 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-http 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-codec-socks 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-common 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-handler 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-handler-proxy 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-resolver 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-resolver-dns 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-classes-epoll 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-epoll 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-epoll-debuginfo 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-netty-transport-native-unix-common 0:4.1.119-1.Final_redhat_00002.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-slf4j 0:2.0.16-2.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-slf4j-api 0:2.0.16-2.redhat_00003.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly 0:8.0.6-15.GA_redhat_00009.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk11 0:8.0.6-15.GA_redhat_00009.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk17 0:8.0.6-15.GA_redhat_00009.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-java-jdk21 0:8.0.6-15.GA_redhat_00009.1.el9eap
Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.0::el9 eap8-wildfly-modules 0:8.0.6-15.GA_redhat_00009.1.el9eap

Vulnerabilities 4

  • High 7.5
    CVE-2025-24970

    SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

    Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

    netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2024-8447

    Narayana: deadlock via multiple join requests sent to lra coordinator

    A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang in…

    Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 7 Red Hat JBoss Enterprise Application Platform 8 Maven
  • Medium 5.5
    CVE-2024-47535

    Denial of Service attack on windows app using Netty

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on a…

    netty netty netty sonarqube Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2025-25193

    Denial of Service attack on windows app using Netty

    Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows applic…

    netty netty netty celeborn-0.6 Ubuntu Wolfi Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
  • article
    https://access.redhat.com/articles/7109353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2325538
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2335206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2344787
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2344788
  • article
    https://issues.redhat.com/browse/JBEAP-29540
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3357.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-8447
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-8447
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-8447
  • article
    https://github.com/jbosstm/narayana/pull/2293
  • report
    https://access.redhat.com/security/cve/CVE-2024-47535
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47535
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47535
  • article
    https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
  • article
    https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
  • report
    https://access.redhat.com/security/cve/CVE-2025-24970
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-24970
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-24970
  • article
    https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
  • article
    https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
  • report
    https://access.redhat.com/security/cve/CVE-2025-25193
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-25193
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-25193
  • article
    https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
  • article
    https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx