RHSA-2024:7736: Important: Red Hat JBoss Enterprise Application Platform 7.4 Security update

Q: What is the severity of RHSA-2024:7736?

The severity of RHSA-2024:7736 is classified as important.

Q: How do I fix RHSA-2024:7736?

To fix RHSA-2024:7736, update to the recommended package versions for JBoss Enterprise Application Platform and its components as specified in the advisory.

Q: What software is affected by RHSA-2024:7736?

RHSA-2024:7736 affects Red Hat JBoss Enterprise Application Platform 7.4 and related packages.

Q: What types of vulnerabilities does RHSA-2024:7736 address?

RHSA-2024:7736 addresses security vulnerabilities within the JBoss Enterprise Application Platform that could potentially allow for unauthorized access.

Q: When was RHSA-2024:7736 released?

RHSA-2024:7736 was released on a date concurrent with the advisory publication by Red Hat.

Published Oct 7, 2024

Updated

Important: Red Hat JBoss Enterprise Application Platform 7.4 Security update

Other sources

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.<br>This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.<br>Security Fix(es):<br><li> undertow: Improper State Management in Proxy Protocol parsing causes information leakage (CVE-2024-7885)</li> A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.<br>For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

21 affected componentsFixes available

redhat/eap7-undertow<2.2.33-2.SP2_redhat_00001.1.el9ea

2.2.33-2.SP2_redhat_00001.1.el9ea

redhat/eap7-wildfly<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-wildfly-java-jdk11<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-wildfly-java-jdk17<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-wildfly-java-jdk8<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-wildfly-javadocs<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-wildfly-modules<7.4.18-1.GA_redhat_00003.1.el9ea

7.4.18-1.GA_redhat_00003.1.el9ea

redhat/eap7-undertow<2.2.33-2.SP2_redhat_00001.1.el8ea

2.2.33-2.SP2_redhat_00001.1.el8ea

redhat/eap7-wildfly<7.4.18-1.GA_redhat_00003.1.el8ea