RHSA-2025:3357
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- redhat•eap8-eap-product-conf-parent
< 0:800.6.1-1.GA_redhat_00001.1.el8eap | < 0:800.6.1-1.GA_redhat_00001.1.el9eap
- redhat•eap8-eap-product-conf-wildfly-ee-feature-pack
< 0:800.6.1-1.GA_redhat_00001.1.el8eap | < 0:800.6.1-1.GA_redhat_00001.1.el9eap
- redhat•eap8-netty
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-buffer
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-codec
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-codec-dns
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-codec-http
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-codec-socks
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-common
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-handler
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-handler-proxy
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-resolver
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-resolver-dns
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-transport
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-transport-classes-epoll
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-transport-native-epoll
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-transport-native-epoll-debuginfo
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-netty-transport-native-unix-common
< 0:4.1.119-1.Final_redhat_00002.1.el8eap | < 0:4.1.119-1.Final_redhat_00002.1.el9eap
- redhat•eap8-slf4j
< 0:2.0.16-2.redhat_00003.1.el8eap | < 0:2.0.16-2.redhat_00003.1.el9eap
- redhat•eap8-slf4j-api
< 0:2.0.16-2.redhat_00003.1.el8eap | < 0:2.0.16-2.redhat_00003.1.el9eap
- redhat•eap8-wildfly
< 0:8.0.6-15.GA_redhat_00009.1.el8eap | < 0:8.0.6-15.GA_redhat_00009.1.el9eap
- redhat•eap8-wildfly-java-jdk11
< 0:8.0.6-15.GA_redhat_00009.1.el8eap | < 0:8.0.6-15.GA_redhat_00009.1.el9eap
- redhat•eap8-wildfly-java-jdk17
< 0:8.0.6-15.GA_redhat_00009.1.el8eap | < 0:8.0.6-15.GA_redhat_00009.1.el9eap
- redhat•eap8-wildfly-java-jdk21
< 0:8.0.6-15.GA_redhat_00009.1.el8eap | < 0:8.0.6-15.GA_redhat_00009.1.el9eap
- redhat•eap8-wildfly-modules
< 0:8.0.6-15.GA_redhat_00009.1.el8eap | < 0:8.0.6-15.GA_redhat_00009.1.el9eap
References (29)
- https://access.redhat.com/errata/RHSA-2025:3357
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
- https://access.redhat.com/articles/7109353
- https://bugzilla.redhat.com/show_bug.cgi?id=2325538
- https://bugzilla.redhat.com/show_bug.cgi?id=2335206
- https://bugzilla.redhat.com/show_bug.cgi?id=2344787
- https://bugzilla.redhat.com/show_bug.cgi?id=2344788
- https://issues.redhat.com/browse/JBEAP-29540
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3357.json
- https://access.redhat.com/security/cve/CVE-2024-8447
- https://www.cve.org/CVERecord?id=CVE-2024-8447
- https://nvd.nist.gov/vuln/detail/CVE-2024-8447
- https://github.com/jbosstm/narayana/pull/2293
- https://access.redhat.com/security/cve/CVE-2024-47535
- https://www.cve.org/CVERecord?id=CVE-2024-47535
- https://nvd.nist.gov/vuln/detail/CVE-2024-47535
- https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
- https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
- https://access.redhat.com/security/cve/CVE-2025-24970
- https://www.cve.org/CVERecord?id=CVE-2025-24970
- https://nvd.nist.gov/vuln/detail/CVE-2025-24970
- https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
- https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
- https://access.redhat.com/security/cve/CVE-2025-25193
- https://www.cve.org/CVERecord?id=CVE-2025-25193
- https://nvd.nist.gov/vuln/detail/CVE-2025-25193
- https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
- https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx