Red Hat Product Errata RHSA-2025:10453 - Security Advisory
Issued:
2025-07-07
Updated:
2025-07-07

RHSA-2025:10453 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.0.8 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.0.7, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.0.8 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • org.jboss.hal-hal-parent: base-x homograph attack allows Unicode lookalike characters to bypass validation. [eap-8.0.z] (CVE-2025-27611)
  • org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console [eap-8.0.z] (CVE-2025-2901)
  • wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution [eap-8.0.z] (CVE-2025-2251)
  • org.apache.cxf/cxf-core: Apache CXF: Denial of Service vulnerability with temporary files [eap-8.0.z] (CVE-2025-23184)
  • commons-beanutils-commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default [eap-8.0.z] (CVE-2025-48734)
  • commons-beanutils-core: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default [eap-8.0.z] (CVE-2025-48734)
  • org.jboss.eap-jboss-eap-xp: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default [eap-8.0.z] (CVE-2025-48734)
  • commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default [eap-8.0.z] (CVE-2025-48734)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 8.0 for RHEL 9 x86_64

Fixes

  • BZ - 2339095 - CVE-2025-23184 org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files
  • BZ - 2351678 - CVE-2025-2251 org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution
  • BZ - 2355685 - CVE-2025-2901 org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console
  • BZ - 2363176 - CVE-2025-27611 base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation.
  • BZ - 2368956 - CVE-2025-48734 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
  • JBEAP-29253 - Tracker bug for the EAP 8.0.9 release for RHEL-8
  • JBEAP-28866 - (8.0.z) Upgrade Migration Tool for EAP 8.0 Update 8
  • JBEAP-28992 - (8.0.z) Upgrade JBossWS-CXF from 7.3.1.Final-redhat-00001 to 7.3.3.Final-redhat-00001
  • JBEAP-29257 - [GSS](8.0.z) Upgrade Artemis from 2.33.0.redhat-00016 to 2.33.0.redhat-00017
  • JBEAP-29530 - (8.0.z) Upgrade WildFly Core from 21.0.15.Final-redhat-00001 to 21.0.16.Final-redhat-00001
  • JBEAP-29679 - (8.0.z) Update EAP channel to use wildfly-ee-feature-pack-product-conf x.x.x in EAP 8.0 Update 8
  • JBEAP-29691 - (8.0.z) Upgrade jboss-remoting from 5.0.30.Final-redhat-00001 to 5.0.31.Final-redhat-00001
  • JBEAP-29692 - [GSS](8.0.z) Upgrade Hibernate from 6.2.35.Final-redhat-00001 to 6.2.36.Final-redhat-00001
  • JBEAP-29806 - (8.0.z) Upgrade to Narayana from 6.0.4.Final-redhat-00001 to 6.0.6.Final-redhat-00001
  • JBEAP-29863 - [GSS](8.0.z) Upgrade WildFly Elytron from 2.2.9.Final-redhat-00001 to 2.2.10.Final-redhat-00001
  • JBEAP-29867 - (8.0.z) Upgrade Elytron Web from 4.0.1.Final-redhat-00001 to 4.0.3.Final-redhat-00001
  • JBEAP-29984 - (8.0.z) ELY-2903 - Fix for CVE-2024-12369 (ELY-2887) breaks OIDC usage with refresh tokens
  • JBEAP-29999 - (8.0.z) Upgrade WildFly Elytron from 2.2.10.Final-redhat-00001 to 2.2.11.Final-redhat-00001
  • JBEAP-30087 - (8.0.z) Upgrade jboss-eap-installation-manager (prospero) to 1.1.18.Final
  • JBEAP-30151 - (8.0.z) Upgrade eap-cloud-galleon-pack 1.1.0.Final-redhat-dev-00001
  • JBEAP-30157 - (8.0.z) Upgrade HAL Console to 3.6.24
  • JBEAP-30263 - (8.0.z) Upgrade commons-beanutils to 1.11.0.redhat-00001

JBoss Enterprise Application Platform 8.0 for RHEL 9

SRPM
eap8-activemq-artemis-2.33.0-3.redhat_00017.1.el9eap.src.rpm SHA-256: 48ba321c9e453ef8fe39aadafdbf2c4fb9b99886f8b0072ef114240351c019e5
eap8-apache-commons-beanutils-1.11.0-1.redhat_00001.1.el9eap.src.rpm SHA-256: 10afeb2ff1c6ef5a47feecb89ab70d46d7b8aec30ce8074687d9c06bca2a5cf1
eap8-apache-cxf-4.0.6-2.redhat_00001.1.el9eap.src.rpm SHA-256: 8a08fbf38d4ad5cc9c8752986120490a244526af003c2474712b546b266769e8
eap8-apache-mime4j-0.8.12-1.redhat_00001.1.el9eap.src.rpm SHA-256: 4cd5a013503a11616cd7ca51a6c97b55c84aa0d773481971e61f4674ca5ef2a4
eap8-eap-product-conf-parent-800.8.0-1.GA_redhat_00001.1.el9eap.src.rpm SHA-256: d5ba47383237c32d8b9803307322b4a58a2b028cfad6fd14f6aa77f64ca93928
eap8-elytron-web-4.0.3-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 84ae9bc0543e7c47659cd16dc6130d214c3b42bb15cf9ef7acd1eb36691a3a17
eap8-fastinfoset-2.1.1-1.redhat_00001.1.el9eap.src.rpm SHA-256: 322303d5b0b954ac569277b0da24464c55ed6aa4ff6eb01a5e23d566b0e21a40
eap8-hal-console-3.6.24-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: be7b8d747aa9213aa64f18305b0a5c57edd709524f8db681111598d279fa4359
eap8-hibernate-6.2.36-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 8f600d0a587aba7a50abb1485e2c19495f35fbb4d5c540f2667762561cb60018
eap8-httpcomponents-asyncclient-4.1.5-4.redhat_00006.1.el9eap.src.rpm SHA-256: d39fca4b6ba5381d8cbcd1d86e6a2098d996f27263c6092fc27d25997d1aa07d
eap8-jboss-remoting-5.0.31-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: e0fa1dc92c479f1ccd69f5c63f2dd6b8b1f40adc9ecf7b7c9e31bb1a57773b30
eap8-jbossws-cxf-7.3.3-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 53e754d7e42c5cdcc9b1d8ed79db0d392fca5a098ec24b1d1106699fe3cb719d
eap8-narayana-6.0.6-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 3e0b091cd505ac231ed0f446d5c53ceaf613ab0594a1da5b2a0ea6620cb0404b
eap8-neethi-3.2.1-1.redhat_00002.1.el9eap.src.rpm SHA-256: 56f4e1da3ff8b423e7cc7e12390d7ac578e4436b0015666961fdb56ecd51ff3e
eap8-reactivex-rxjava2-2.2.21-3.redhat_00002.1.el9eap.src.rpm SHA-256: 75a4649b17888f044d776de59b551aea558865674ea0c88d0cc4dc496b531243
eap8-slf4j-2.0.17-1.redhat_00001.1.el9eap.src.rpm SHA-256: ebec1ef8d3eb1100e60e4cfc9543c6266408907b9e61864a99fbed81307fca4a
eap8-velocity-2.3.0-4.redhat_00010.1.el9eap.src.rpm SHA-256: 478963539e46a67070a06ea470735b90316e115017e1d005a06a7cd9bb27243d
eap8-wildfly-8.0.8-4.GA_redhat_00006.1.el9eap.src.rpm SHA-256: 17a0980652b726642f2cb2a3e68a11c13d851c39c14bf446d598bac4cd0675f1
eap8-wildfly-elytron-2.2.11-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 240926c4bb6631e66b76a0883c3cd07850ab5b96465bfd1a146d05e20367b5c6
x86_64
eap8-activemq-artemis-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 2520042df6ec30d43c333b2182a938f04a6e1c6c2c9dcd7382c6e2bc75edfe5b
eap8-activemq-artemis-cli-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 02b9d1ddfade525b777628958bae60a79a95a45623220ecc824a31c2ec2aa19e
eap8-activemq-artemis-commons-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 4f4e433552464102cecaffc83abcb94abf1bbf0ee8713a9b27db77dcc5ebf395
eap8-activemq-artemis-core-client-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: a4bb57d0cbab9ef288cc6d35a012b7364573429359b02ef275e70b8f99c6dfd3
eap8-activemq-artemis-dto-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: fc523677ee342dabd0275a1863b0df5cd408fe738ec39efb9a988ea5cba6ee31
eap8-activemq-artemis-hornetq-protocol-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 2b4c11cc7b1969d23fd815445f44bafbdb3de69ca8d1f65feccdc86f1d4cf743
eap8-activemq-artemis-hqclient-protocol-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: df44270b23d3d73cbf5499fa7c6549cfd06e1d3076cae1e8265c3e8b01e267f6
eap8-activemq-artemis-jakarta-client-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 94446bac92b6a80f9fdb4b1e43309c42714b29274167dc110f990125631ca687
eap8-activemq-artemis-jakarta-ra-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 5776e7b44e49c1885712ff0c8a814a33db9f1e69ace3775feae07ef6ce1743fe
eap8-activemq-artemis-jakarta-server-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 1634733587e2c98775a56bd5831d8b87fd05ee146272fce643486787fbb9b41f
eap8-activemq-artemis-jakarta-service-extensions-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 27a8e156069c2ec14c4bd7f9187e86bc90ed3bd17ff7a2547852159866db8854
eap8-activemq-artemis-jdbc-store-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 0921f53c605e7b7729d9bc3ea297bb34d06341d6ccb6327cbc9497e0006ada31
eap8-activemq-artemis-journal-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: 4b9ed26433bedfd389b834e7a69956464ee3e4a2cb5227446e9d0ac0de4a6c82
eap8-activemq-artemis-selector-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: c5f4a6bdf55b1eedc321ac5e20c02a44932311eccc088d5c2bc5dac6567cccfd
eap8-activemq-artemis-server-2.33.0-3.redhat_00017.1.el9eap.noarch.rpm SHA-256: c3aa6fd0b259fe414d608818d26146325c8af78c61cc656638ddd20763d6bb07
eap8-apache-commons-beanutils-1.11.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 83a75fe4e3379bbe6adaa37f82b39a656bffd7df4cfbe062e94fb7a0995a37cc
eap8-apache-cxf-4.0.6-2.redhat_00001.1.el9eap.noarch.rpm SHA-256: e4eb9b33a6a29ee0240842ff4f3a42b93c37ee663e99f4d26a7f94a5948848bf
eap8-apache-cxf-rt-4.0.6-2.redhat_00001.1.el9eap.noarch.rpm SHA-256: f7b95c9a79352cf99b7538037ed5a02fba2fe28a7c039c9294e47025ff7b516c
eap8-apache-cxf-services-4.0.6-2.redhat_00001.1.el9eap.noarch.rpm SHA-256: 68edcba104d41edaf88d6bd5ce276b8688a103706749adf3fe162f73f61bef98
eap8-apache-cxf-tools-4.0.6-2.redhat_00001.1.el9eap.noarch.rpm SHA-256: f8a0cf65537fae68e8f3c228929790b2f6d9e50e6355ebce7119c419e72cafc4
eap8-apache-mime4j-0.8.12-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 93a5fe31fafc68ac3a157acf1110726a4574839ef282735922bbaa77792f8b16
eap8-apache-mime4j-dom-0.8.12-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 249c415a91bb5de9ea1e43c1d7309f0cb54f7ad5a823931fb07518e5b58588c9
eap8-apache-mime4j-storage-0.8.12-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: dc5e390b6d645c293e33cc513b177f80b4fb95bb6ae91158270e85a0249cd8fb
eap8-eap-product-conf-parent-800.8.0-1.GA_redhat_00001.1.el9eap.noarch.rpm SHA-256: ceefa1fc653de2a56c9f2455db53ec94a7c83649c5ed4a4959ab7875b682711c
eap8-eap-product-conf-wildfly-ee-feature-pack-800.8.0-1.GA_redhat_00001.1.el9eap.noarch.rpm SHA-256: bfbc75f31893f36e9b5b11aad347808a3565d26a37b4437fe785e9eb67fc076f
eap8-elytron-web-4.0.3-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 3e93c29ebf28ebcc2b96553aefa8d99cf5c4ecf1d438fb2a0f1c40aee759afa5
eap8-fastinfoset-2.1.1-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 143ca2029b7ab0d2f583ac9c803daa0bc47acb9e52896f0c4bf4b193b5c58f20
eap8-hal-console-3.6.24-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: f3d2ec246eab324024ac9df4868d959cc02652e7b7e199c1028c646959a92a92
eap8-hibernate-6.2.36-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 5112f6a007a9ec7a4f57bf0a1efd50320c47d0022eef4dd8c9fdee361f434fa0
eap8-hibernate-core-6.2.36-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 02dd9c2dc68c347fd3d16382e05776cf58a3baeb732c3c627a480d02341abfaf
eap8-hibernate-envers-6.2.36-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: c80b724717048f3863f3298ff87c41cea0646ab37d9a2c8501d90774ccdaa191
eap8-httpcomponents-asyncclient-4.1.5-4.redhat_00006.1.el9eap.noarch.rpm SHA-256: 01beae7626e573107a401555f192a77d79bb8b93014bc673424ba5e333dd6586
eap8-jboss-remoting-5.0.31-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: ea42bb4ed3204fe8b5c0f0391dafda5cb8478cb890fd4215b078331a0e4a6255
eap8-jbossws-cxf-7.3.3-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: cfca9040b1cdbaca9f94d1035c4096b32cc8943bd44c025587cf7bb68a47a96c
eap8-narayana-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 30b9915db097adc92f28210ab879d97d390d6ac8a33766e15b7309dab2466120
eap8-narayana-jbosstxbridge-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: df66eb8a96f6cbeac4847934797cb3fc95998b8be88b85d0e50bbf83308ebdcb
eap8-narayana-jbossxts-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d0bc93daccd9e20d2a2328b753abaedb2be4d9ce77fa8cb56a5139a2a0a0a4e1
eap8-narayana-jts-idlj-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 4f4f1594d7924c9e56244bcf5eb414032e315a922a3abb6e2f42de45d635da8b
eap8-narayana-jts-integration-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: a97be2cb65164dfdb48002a95bd05c965f5805080f588d91185ea7d10d4fa001
eap8-narayana-restat-api-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 8c933e8dc1f250cf7b82d7f89f2cdad10380764469fde27b4da68b61aabfab6f
eap8-narayana-restat-bridge-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 815333adf7d12915eb06c1d84c5c22ec961fefc341e7079e3b27a6f4a7730099
eap8-narayana-restat-integration-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: f2b45f7bbe90783453d18b7bf27908fc5b69e71d5bc61a0e5b66f7388f2d6420
eap8-narayana-restat-util-6.0.6-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: adb74d5368ebf29245850a276a20b06764c6ab78b3fc4c4c4712fb6513012d07
eap8-neethi-3.2.1-1.redhat_00002.1.el9eap.noarch.rpm SHA-256: 8c850ec03f56c595f9acc81b1a02e53f185d31fcb8003e4db7a361a9754c37d1
eap8-reactivex-rxjava2-2.2.21-3.redhat_00002.1.el9eap.noarch.rpm SHA-256: c24a66bd6f9b0bc7e67ef70b736cf5ee2a92cba3f2635ef736b14b1d2d033f97
eap8-slf4j-2.0.17-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 4525058c29607564b9cbf46434c4b6706ca1e6c467145221cdf034174295db8c
eap8-slf4j-api-2.0.17-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 4e93a771d7f19ebb4b9d31872bae822622312536cf441426765c806a23d44910
eap8-velocity-2.3.0-4.redhat_00010.1.el9eap.noarch.rpm SHA-256: f2e7ae9132bfaac6eeeefed99d399bbdb1112926399b7034aacc8e3852ed1765
eap8-velocity-engine-core-2.3.0-4.redhat_00010.1.el9eap.noarch.rpm SHA-256: 6992ae6b169d306eaae57d34c46224c1ed40589fc787dced30561d1a90b020d8
eap8-wildfly-8.0.8-4.GA_redhat_00006.1.el9eap.noarch.rpm SHA-256: c4452229cbcc2505909923c18eba967cca0bdfb95c2802caf449da3d5b0abcf3
eap8-wildfly-elytron-2.2.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 3b1a4bf39be5c321e8e2ff2cd8610a8fc5374eeb93bfe97badd359a8e361582d
eap8-wildfly-elytron-tool-2.2.11-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 8ee8270a03099a111ff2a51a022e1bf76966c5dc0fa730dbd98ad1baf1108317
eap8-wildfly-java-jdk11-8.0.8-4.GA_redhat_00006.1.el9eap.noarch.rpm SHA-256: c404993664b2be8ade4254f170f9ce0fad126a72dc6abf510050465fae82701d
eap8-wildfly-java-jdk17-8.0.8-4.GA_redhat_00006.1.el9eap.noarch.rpm SHA-256: 1370cd6339aea89568cef116e6a5d8f9ba77d2ec9ca61e4b15ac069358c760e8
eap8-wildfly-java-jdk21-8.0.8-4.GA_redhat_00006.1.el9eap.noarch.rpm SHA-256: 7cc98dc6091a3e193da46bec41b1c2b9a7542789d4ed509180b2812bafe1be9b
eap8-wildfly-modules-8.0.8-4.GA_redhat_00006.1.el9eap.noarch.rpm SHA-256: b22dc75f77f42492a8a7d584160f05200c7e7a11178d487f711636dc373f6db4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.