Red Hat Security AdvisoryRHSA-2024:7441
Red Hat JBoss Enterprise Application Platform 8.0 security update
Released 2024-10-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 8.0 for RHEL 8 eap8-amazon-ion-java-1.11.9-2.redhat_00001.1.el8eap, eap8-eap-product-conf-parent-800.3.1-2.GA_redhat_00002.1.el8eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.3.1-2.GA_redhat_00002.1.el8eap +6
- Red Hat JBoss EAP 8.0 for RHEL 9 eap8-amazon-ion-java-1.11.9-2.redhat_00001.1.el9eap, eap8-eap-product-conf-parent-800.3.1-2.GA_redhat_00002.1.el9eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.3.1-2.GA_redhat_00002.1.el9eap +6
Fixes 2 records
Priority LOW 38
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2024-08-21 · Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362
Priority LOW 34
Amazon Ion is a Java implementation of the Ion data notation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2024-01-03 · Partial fix · 1.10.5 CWE-770
