RHSA-2025:1746: Critical: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
First published: Mon Feb 24 2025(Updated: )
Critical: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/eap7-apache-cxf | <3.1.16-4.redhat_00003.1.ep7.el7 | 3.1.16-4.redhat_00003.1.ep7.el7 |
| redhat/eap7-jackson-databind | <2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 | 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 |
| redhat/eap7-jettison | <1.3.8-2.redhat_00002.1.ep7.el7 | 1.3.8-2.redhat_00002.1.ep7.el7 |
| redhat/eap7-netty | <4.1.63-1.Final_redhat_00002.1.ep7.el7 | 4.1.63-1.Final_redhat_00002.1.ep7.el7 |
| redhat/eap7-resteasy | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-snakeyaml | <1.33.0-1.SP1_redhat_00001.1.ep7.el7 | 1.33.0-1.SP1_redhat_00001.1.ep7.el7 |
| redhat/eap7-velocity | <1.7.0-3.redhat_00006.1.ep7.el7 | 1.7.0-3.redhat_00006.1.ep7.el7 |
| redhat/eap7-wildfly | <7.1.9-2.GA_redhat_00002.1.ep7.el7 | 7.1.9-2.GA_redhat_00002.1.ep7.el7 |
| redhat/eap7-apache-cxf | <3.1.16-4.redhat_00003.1.ep7.el7 | 3.1.16-4.redhat_00003.1.ep7.el7 |
| redhat/eap7-apache-cxf-rt | <3.1.16-4.redhat_00003.1.ep7.el7 | 3.1.16-4.redhat_00003.1.ep7.el7 |
| redhat/eap7-apache-cxf-services | <3.1.16-4.redhat_00003.1.ep7.el7 | 3.1.16-4.redhat_00003.1.ep7.el7 |
| redhat/eap7-apache-cxf-tools | <3.1.16-4.redhat_00003.1.ep7.el7 | 3.1.16-4.redhat_00003.1.ep7.el7 |
| redhat/eap7-jackson-databind | <2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 | 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 |
| redhat/eap7-jettison | <1.3.8-2.redhat_00002.1.ep7.el7 | 1.3.8-2.redhat_00002.1.ep7.el7 |
| redhat/eap7-netty | <4.1.63-1.Final_redhat_00002.1.ep7.el7 | 4.1.63-1.Final_redhat_00002.1.ep7.el7 |
| redhat/eap7-netty-all | <4.1.63-1.Final_redhat_00002.1.ep7.el7 | 4.1.63-1.Final_redhat_00002.1.ep7.el7 |
| redhat/eap7-resteasy | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-atom-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-cdi | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-client | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-crypto | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jackson-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jackson2-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jaxb-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jaxrs | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jettison-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jose-jwt | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-jsapi | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-json-p-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-multipart-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-spring | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-validator-provider | <11-3.0.27-1.Final_redhat_00001.1.ep7.el7 | 11-3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-resteasy-yaml-provider | <3.0.27-1.Final_redhat_00001.1.ep7.el7 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 |
| redhat/eap7-snakeyaml | <1.33.0-1.SP1_redhat_00001.1.ep7.el7 | 1.33.0-1.SP1_redhat_00001.1.ep7.el7 |
| redhat/eap7-velocity | <1.7.0-3.redhat_00006.1.ep7.el7 | 1.7.0-3.redhat_00006.1.ep7.el7 |
| redhat/eap7-wildfly | <7.1.9-2.GA_redhat_00002.1.ep7.el7 | 7.1.9-2.GA_redhat_00002.1.ep7.el7 |
| redhat/eap7-wildfly-modules | <7.1.9-2.GA_redhat_00002.1.ep7.el7 | 7.1.9-2.GA_redhat_00002.1.ep7.el7 |
| Red Hat JBoss Enterprise Application Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:1746 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=1815470
- https://bugzilla.redhat.com/show_bug.cgi?id=1815495
- https://bugzilla.redhat.com/show_bug.cgi?id=1816330
- https://bugzilla.redhat.com/show_bug.cgi?id=1816332
- https://bugzilla.redhat.com/show_bug.cgi?id=1816337
- https://bugzilla.redhat.com/show_bug.cgi?id=1816340
- https://bugzilla.redhat.com/show_bug.cgi?id=1937440
- https://bugzilla.redhat.com/show_bug.cgi?id=1991305
- https://bugzilla.redhat.com/show_bug.cgi?id=2030932
- https://bugzilla.redhat.com/show_bug.cgi?id=2032580
- https://bugzilla.redhat.com/show_bug.cgi?id=2135244
- https://bugzilla.redhat.com/show_bug.cgi?id=2135247
- https://bugzilla.redhat.com/show_bug.cgi?id=2135435
- https://bugzilla.redhat.com/show_bug.cgi?id=2145194
- https://bugzilla.redhat.com/show_bug.cgi?id=2150009
- https://bugzilla.redhat.com/show_bug.cgi?id=2153379
- https://bugzilla.redhat.com/show_bug.cgi?id=2155681
- https://bugzilla.redhat.com/show_bug.cgi?id=2155970
- https://issues.redhat.com/browse/JBEAP-28583
- https://issues.redhat.com/browse/JBEAP-28817
- https://access.redhat.com/security/updates/classification/#critical
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
Frequently Asked Questions
What is the severity of RHSA-2025:1746?
The vulnerability identified by RHSA-2025:1746 is classified as critical.
How do I fix RHSA-2025:1746?
To fix the vulnerability in RHSA-2025:1746, update to the specified package versions detailed in the advisory.
Which software is affected by RHSA-2025:1746?
RHSA-2025:1746 affects several packages within the Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7.
What versions are recommended to address RHSA-2025:1746?
Recommended versions to address RHSA-2025:1746 include eap7-apache-cxf 3.1.16-4, eap7-jackson-databind 2.8.11.6-2.SP1, and eap7-wildfly 7.1.9-2.GA.
What is the impact of RHSA-2025:1746 if not addressed?
If not addressed, the vulnerability associated with RHSA-2025:1746 could potentially allow for severe security risks, including unauthorized access or service disruptions.
- agent/references
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/remedy
- agent/severity
- agent/source
- agent/type
- agent/softwarecombine
- agent/event
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2025:1746
- agent/software-canonical-lookup
- collector/redhat-errata-latest
- agent/tags
- package-manager/redhat
- vendor/red hat
- canonical/red hat jboss enterprise application platform