RHSA-2024:10207: Important: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update
First published: Mon Nov 25 2024(Updated: )
Important: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/eap7-apache-cxf | <3.4.10-1.SP1_redhat_00001.1.el7ea | 3.4.10-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-avro | <1.7.6-8.redhat_00003.1.el7ea | 1.7.6-8.redhat_00003.1.el7ea |
| redhat/eap7-h2database | <1.4.197-3.redhat_00004.1.el7ea | 1.4.197-3.redhat_00004.1.el7ea |
| redhat/eap7-jboss-marshalling | <2.0.15-1.Final_redhat_00001.1.el7ea | 2.0.15-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-server-migration | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-xnio-base | <3.7.13-1.Final_redhat_00001.1.el7ea | 3.7.13-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-log4j-jboss-logmanager | <1.2.2-2.Final_redhat_00002.1.el7ea | 1.2.2-2.Final_redhat_00002.1.el7ea |
| redhat/eap7-wildfly | <7.3.11-4.GA_redhat_00002.1.el7ea | 7.3.11-4.GA_redhat_00002.1.el7ea |
| redhat/eap7-wss4j | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-xalan-j2 | <2.7.1-38.redhat_00015.1.el7ea | 2.7.1-38.redhat_00015.1.el7ea |
| redhat/eap7-xml-security | <2.2.3-2.redhat_00001.1.el7ea | 2.2.3-2.redhat_00001.1.el7ea |
| redhat/eap7-apache-cxf-rt | <3.4.10-1.SP1_redhat_00001.1.el7ea | 3.4.10-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-apache-cxf-services | <3.4.10-1.SP1_redhat_00001.1.el7ea | 3.4.10-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-apache-cxf-tools | <3.4.10-1.SP1_redhat_00001.1.el7ea | 3.4.10-1.SP1_redhat_00001.1.el7ea |
| redhat/eap7-jboss-marshalling-river | <2.0.15-1.Final_redhat_00001.1.el7ea | 2.0.15-1.Final_redhat_00001.1.el7ea |
| redhat/eap7-jboss-server-migration-cli | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-core | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap6.4 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap6.4-to-eap7.3 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap7.0 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap7.1 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap7.2 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap7.2-to-eap7.3 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-eap7.3-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly10.0 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly10.1 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly11.0 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly12.0 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly13.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly14.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly15.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly16.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly17.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly18.0-server | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly8.2 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-jboss-server-migration-wildfly9.0 | <1.7.2-12.Final_redhat_00013.1.el7ea | 1.7.2-12.Final_redhat_00013.1.el7ea |
| redhat/eap7-wildfly-java-jdk11 | <7.3.11-4.GA_redhat_00002.1.el7ea | 7.3.11-4.GA_redhat_00002.1.el7ea |
| redhat/eap7-wildfly-java-jdk8 | <7.3.11-4.GA_redhat_00002.1.el7ea | 7.3.11-4.GA_redhat_00002.1.el7ea |
| redhat/eap7-wildfly-javadocs | <7.3.11-4.GA_redhat_00002.1.el7ea | 7.3.11-4.GA_redhat_00002.1.el7ea |
| redhat/eap7-wildfly-modules | <7.3.11-4.GA_redhat_00002.1.el7ea | 7.3.11-4.GA_redhat_00002.1.el7ea |
| redhat/eap7-wss4j-bindings | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-wss4j-policy | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-wss4j-ws-security-common | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-wss4j-ws-security-dom | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-wss4j-ws-security-policy-stax | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| redhat/eap7-wss4j-ws-security-stax | <2.3.3-2.redhat_00001.1.el7ea | 2.3.3-2.redhat_00001.1.el7ea |
| Red Hat JBoss Enterprise Application Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:10207 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=2010378
- https://bugzilla.redhat.com/show_bug.cgi?id=2031667
- https://bugzilla.redhat.com/show_bug.cgi?id=2041959
- https://bugzilla.redhat.com/show_bug.cgi?id=2041967
- https://bugzilla.redhat.com/show_bug.cgi?id=2044596
- https://bugzilla.redhat.com/show_bug.cgi?id=2108554
- https://bugzilla.redhat.com/show_bug.cgi?id=2136141
- https://bugzilla.redhat.com/show_bug.cgi?id=2155682
- https://bugzilla.redhat.com/show_bug.cgi?id=2182864
- https://bugzilla.redhat.com/show_bug.cgi?id=2213639
- https://bugzilla.redhat.com/show_bug.cgi?id=2241822
- https://bugzilla.redhat.com/show_bug.cgi?id=2242521
- https://bugzilla.redhat.com/show_bug.cgi?id=2270732
- https://bugzilla.redhat.com/show_bug.cgi?id=2316116
- https://issues.redhat.com/browse/JBEAP-23025
- https://issues.redhat.com/browse/JBEAP-28084
- https://issues.redhat.com/browse/JBEAP-28089
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index
Frequently Asked Questions
What is the severity of RHSA-2024:10207?
The severity of RHSA-2024:10207 is classified as Important.
How do I fix the vulnerability described in RHSA-2024:10207?
To fix the vulnerability in RHSA-2024:10207, update to the recommended package versions stated in the advisory.
Which versions of Red Hat JBoss Enterprise Application Platform are affected by RHSA-2024:10207?
RHSA-2024:10207 affects versions of Red Hat JBoss Enterprise Application Platform 7.3.11 and earlier.
What are the affected packages for RHSA-2024:10207?
Affected packages for RHSA-2024:10207 include eap7-apache-cxf, eap7-avro, eap7-h2database, and several others listed in the advisory.
Is there a need for immediate action regarding RHSA-2024:10207?
Yes, immediate action is recommended to mitigate the security risks associated with vulnerability RHSA-2024:10207.
- agent/severity
- agent/type
- agent/remedy
- agent/title
- agent/references
- agent/weakness
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2024:10207
- agent/software-canonical-lookup
- agent/event
- agent/source
- agent/tags
- collector/redhat-errata-latest
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/red hat
- canonical/red hat jboss enterprise application platform