Red Hat Security AdvisoryRHSA-2025:20052
Red Hat JBoss Enterprise Application Platform 7.4.23 security update
Released 2025-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server eap7-protostream-4.3.7-1.Final_redhat_00001.1.el7eap, eap7-wildfly-7.4.23-5.GA_redhat_00004.1.el7eap, eap7-wildfly-java-jdk11-7.4.23-5.GA_redhat_00004.1.el7eap +3
- Red Hat JBoss EAP 7.4 ELS for RHEL 8 eap7-protostream-4.3.7-1.Final_redhat_00001.1.el8eap, eap7-wildfly-7.4.23-5.GA_redhat_00004.1.el8eap, eap7-wildfly-java-jdk11-7.4.23-5.GA_redhat_00004.1.el8eap +4
- Red Hat JBoss EAP 7.4 ELS for RHEL 9 eap7-protostream-4.3.7-1.Final_redhat_00001.1.el9eap, eap7-wildfly-7.4.23-5.GA_redhat_00004.1.el9eap, eap7-wildfly-java-jdk11-7.4.23-5.GA_redhat_00004.1.el9eap +4
Fixes 1 record
Priority MEDIUM 49
Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.02772 · Published 2024-09-19 · Partial fix · 28.2, 3.25.5 +2 CWE-400
