Red Hat Security AdvisoryRHSA-2025:3357
Red Hat JBoss Enterprise Application Platform 8.0.6 security update
Released 2025-03-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 8.0 for RHEL 8 eap8-eap-product-conf-parent-800.6.1-1.GA_redhat_00001.1.el8eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.6.1-1.GA_redhat_00001.1.el8eap, eap8-netty-4.1.119-1.Final_redhat_00002.1.el8eap +21
- Red Hat JBoss EAP 8.0 for RHEL 9 eap8-eap-product-conf-parent-800.6.1-1.GA_redhat_00001.1.el9eap, eap8-eap-product-conf-wildfly-ee-feature-pack-800.6.1-1.GA_redhat_00001.1.el9eap, eap8-netty-4.1.119-1.Final_redhat_00002.1.el9eap +21
Fixes 4 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority MEDIUM 58
Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-400
Priority MEDIUM 58
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00408 · Published 2024-11-12 · Fixed in 4.1.115, 4.1.115.Final CWE-400
Priority LOW 28
A security issue was discovered in the LRA Coordinator component of Narayana.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00681 · Published 2025-01-02 · Partial fix · 7.1.0.Final, 800.6.1-1.GA_redhat_00001.1.el8eap +7 CWE-833
THREATIST.IORead the docs