Red Hat Security Advisory

RHSA-2026:1871

Red Hat JBoss Enterprise Application Platform 8.1.4 security update

Released 2026-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss EAP 8.1 for RHEL 9 eap8-wildfly-8.1.4-2.GA_redhat_00005.1.el9eap, eap8-wildfly-java-jdk17-8.1.4-2.GA_redhat_00005.1.el9eap, eap8-wildfly-java-jdk21-8.1.4-2.GA_redhat_00005.1.el9eap +1

Fixes 2 records

TI-2025-11170 CVE-2025-12183 · GHSA-vqf4-7m7x-wgfc

org.lz4:lz4-java - Out-of-Bounds Memory Access

MEDIUM 45

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00747 Published 2025-11-28 Partial fix · 1.8.1 CWE-125

TI-2025-40977 CVE-2025-66566 · GHSA-cmp6-m4wj-q63q

yawkat LZ4 Java has a possible information leak in Java safe decompressor

MEDIUM 43

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00649 Published 2025-12-05 Partial fix · 1.10.1 CWE-201