Red Hat Product Errata RHSA-2024:11529 - Security Advisory
Issued:
2024-12-19
Updated:
2024-12-19

RHSA-2024:11529 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.4 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.

Security Fix(es):

  • org.hornetq/hornetq-core-client: Arbitrarily overwrite files or access sensitive information (CVE-2024-51127)

A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.4 for RHEL 9 x86_64
  • JBoss Enterprise Application Platform 7.4 for RHEL 8 x86_64
  • JBoss Enterprise Application Platform 7.4 for RHEL 7 x86_64

Fixes

  • BZ - 2323697 - CVE-2024-51127 hornetq-core-client: Arbitrarily overwrite files or access sensitive information

JBoss Enterprise Application Platform 7.4 for RHEL 9

SRPM
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: d4e2c73cc81639d42d1cc2e8758a1606abe472e13f548f1946ebc68ca034d98f
x86_64
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 0ee82de22b328ec4f6c5e08c9c055ebd2e72b56cea2543ba9d6f14ce0b00133d
eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: c3690a70a3b98de2aa001389195d418b8cc9a5be591ce2269e372c64820b357c
eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 913d2ce4fa2487d7e29236156e53bac1a4b2bb1881a82bd2e1bf12200ddc7951
eap7-hornetq-jms-client-2.4.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 959b9b71f441dacf468351c6dd979599fd9b5edba4fe78d3813d1aae380314e5

JBoss Enterprise Application Platform 7.4 for RHEL 8

SRPM
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el8eap.src.rpm SHA-256: 1fb9dd7086614a03863dd4aedccd68d5374a26fbb25e5e54eec4d20b87c852af
x86_64
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 78273e69678b098c41a424cd8deb7d56e25cb3e72b5087164cdb1c4e84368079
eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 921695bd88765c18193ac6900fd6b3e0aeacedf0d1f5020e75a0f1609a4dcacc
eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: cb2c0cf589b69a2db27af8d26f3f8ddfdf7e79e5de0252ec7f8fbd3f4f2ef1ac
eap7-hornetq-jms-client-2.4.11-1.Final_redhat_00001.1.el8eap.noarch.rpm SHA-256: 1656a7711f8d98a2f2829ce07baff95878239ddc6911c408e901abe80d06e76f

JBoss Enterprise Application Platform 7.4 for RHEL 7

SRPM
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: b810335504c7629475c3f35c42bcf3b59e7fbca14fa14ba8262cbafa05b3800e
x86_64
eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: fde5bdf3498f6c484bf1d2b3934c431a27d13bc963f252042d7eda6dd02bdaf9
eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: f11acf77ccb78daa92fab11758b6a639be7922c9f4185c0aff7e8d335ea1f4aa
eap7-hornetq-core-client-2.4.11-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: f4c0927b46cb72e7464db3af000fc2155bf05c109db9d2662e2c9460aebe8213
eap7-hornetq-jms-client-2.4.11-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 9ec461b04731f7d1246f9a74e1423eaba56c82146956172a9b1e3a42fa0fc0dc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.