Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-apache-cxf | 0:4.0.10-3.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-apache-cxf-rt | 0:4.0.10-3.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-apache-cxf-services | 0:4.0.10-3.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-apache-cxf-tools | 0:4.0.10-3.redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-artemis-wildfly-integration | 0:2.0.4-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-eap-product-conf-parent | 0:801.7.0-1.GA_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-eap-product-conf-wildfly-ee-feature-pack | 0:801.7.0-1.GA_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-hibernate | 0:6.6.50-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-hibernate-core | 0:6.6.50-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-hibernate-envers | 0:6.6.50-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-jbossws-cxf | 0:7.3.8-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-jgroups | 1:5.3.23-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-undertow | 0:2.3.24-4.SP3_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-undertow-jastow | 0:2.2.9-1.SP1_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly | 0:8.1.7-4.GA_redhat_00003.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-elytron | 0:2.6.9-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-elytron-tool | 0:2.6.9-1.Final_redhat_00001.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-java-jdk17 | 0:8.1.7-4.GA_redhat_00003.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-java-jdk21 | 0:8.1.7-4.GA_redhat_00003.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-javadocs | 0:8.1.1-11.GA_redhat_00019.1.el9eap |
| Red Hat · JBoss EAP 8 jboss_enterprise_application_platform:8.1::el9 | eap8-wildfly-modules | 0:8.1.7-4.GA_redhat_00003.1.el9eap |
Vulnerabilities 1
-
Medium 6.5
Jastow: jastow cross-site scripting attack due to unsanitized uri
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index
-
article
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index
-
article
https://access.redhat.com/articles/7141266
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2413071
-
article
https://issues.redhat.com/browse/JBEAP-31549
-
article
https://issues.redhat.com/browse/JBEAP-32062
-
article
https://issues.redhat.com/browse/JBEAP-32489
-
article
https://issues.redhat.com/browse/JBEAP-32528
-
article
https://issues.redhat.com/browse/JBEAP-32838
-
article
https://issues.redhat.com/browse/JBEAP-32871
-
article
https://issues.redhat.com/browse/JBEAP-32962
-
article
https://issues.redhat.com/browse/JBEAP-32963
-
article
https://issues.redhat.com/browse/JBEAP-33022
-
article
https://issues.redhat.com/browse/JBEAP-33158
-
article
https://issues.redhat.com/browse/JBEAP-33551
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36343.json
-
report
https://access.redhat.com/security/cve/CVE-2025-12799
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-12799
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-12799