Red Hat Security AdvisoryRHSA-2024:4390
Red Hat JBoss Enterprise Application Platform 8.0 security update
Released 2024-07-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 8.0 for RHEL 8 eap8-hibernate-6.2.26-1.Final_redhat_00001.1.el8eap, eap8-hibernate-core-6.2.26-1.Final_redhat_00001.1.el8eap, eap8-hibernate-envers-6.2.26-1.Final_redhat_00001.1.el8eap +8
- Red Hat JBoss EAP 8.0 for RHEL 9 eap8-hibernate-6.2.26-1.Final_redhat_00001.1.el9eap, eap8-hibernate-core-6.2.26-1.Final_redhat_00001.1.el9eap, eap8-hibernate-envers-6.2.26-1.Final_redhat_00001.1.el9eap +8
Fixes 1 record
Priority HIGH 81
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.88755 · Published 2024-04-04 · Partial fix CWE-770
