Red Hat Security Advisory

RHSA-2025:7620

JBoss EAP XP 5.0 Update 2.0 release. See references for release notes.

Released 2025-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss EAP XP 5.0 Update 2.0

Fixes 2 records

TI-2024-06719 CVE-2024-7254 · GHSA-735f-pc8j-v9w8

Stack overflow in Protocol Buffers Java Lite

MEDIUM 49

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02772 Published 2024-09-19 Partial fix · 28.2, 3.25.5 +2 CWE-400

TI-2024-07829 CVE-2024-8447 · GHSA-qq9f-q439-2574

Narayana: deadlock via multiple join requests sent to lra coordinator

LOW 28

A security issue was discovered in the LRA Coordinator component of Narayana.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00681 Published 2025-01-02 Partial fix · 7.1.0.Final, 800.6.1-1.GA_redhat_00001.1.el8eap +7 CWE-833