Red Hat Product Errata RHSA-2025:3990 - Security Advisory
Issued:
2025-04-17
Updated:
2025-04-17

RHSA-2025:3990 - Security Advisory

Synopsis

Moderate: Red Hat JBoss Enterprise Application Platform 8.0.7 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.0.7 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.0.6, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.0.7 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • org.wildfly/wildfly-elytron-oidc-client-subsystem: OIDC Authorization Code Injection (CVE-2024-12369)
  • org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 8.0 for RHEL 9 x86_64

Fixes

  • BZ - 2331178 - CVE-2024-12369 elytron-oidc-client: OIDC Authorization Code Injection
  • BZ - 2337620 - CVE-2025-23367 org.wildfly.core:wildfly-server: Wildfly improper RBAC permission
  • JBEAP-28383 - Tracker bug for the EAP 8.0.7 release for RHEL-9
  • JBEAP-28663 - [QE](8.0.z) WFCORE-6644 - Upgrade log4j2 from 2.19.0 to 2.22.1.redhat-00002
  • JBEAP-28842 - [GSS](8.0.z) Upgrade Weld from 5.1.2.Final-redhat-00001 to 5.1.5.Final-redhat-00001
  • JBEAP-28846 - [GSS](8.0.z) Upgrade Hibernate from 6.2.32.Final-redhat-00001 to 6.2.35.Final-redhat-00001
  • JBEAP-28847 - (8.0.z) Upgrade WildFly Core from 21.0.14.Final-redhat-00001 to 21.0.15.Final-redhat-00001
  • JBEAP-28900 - [GSS](8.0.z) Update Mojarra from 4.0.7.redhat-00001 to 4.0.10.redhat-00001
  • JBEAP-28902 - (8.0.z) Update EAP channel to use wildfly-ee-feature-pack-product-conf x.x.x in EAP 8.0 Update 7
  • JBEAP-28961 - (8.0.z) Upgrade Elytron from 2.2.7.Final-redhat-00001 to 2.2.8.Final-redhat-00001
  • JBEAP-28990 - [GSS](8.0.z) ELY-2874 - Upgrade Elytron 2.2.x's SSHD dependency to 2.12.1
  • JBEAP-29232 - (8.0.z) WFLY-20359 - Upgrade to org.glassfish:jakarta.enterprise.concurrent:3.0.1 to address intermittent TCK failures
  • JBEAP-29439 - (8.0.z) Upgrade Mojarra from 4.0.10.redhat-00001 to 4.0.11.redhat-00001
  • JBEAP-29445 - [GSS](8.0.z) Upgrade ironjacamar from 3.0.8.Final-redhat-00001 to 3.0.13.Final-redhat-00001
  • JBEAP-29483 - [GSS](8.0.z) HHH-18027 - Delete/Update statement with IN clause fails on second invocation
  • JBEAP-29555 - (8.0.z) Upgrade jboss-eap-installation-manager (prospero) to 1.1.17.Final

JBoss Enterprise Application Platform 8.0 for RHEL 9

SRPM
eap8-apache-commons-io-2.16.1-1.redhat_00001.1.el9eap.src.rpm SHA-256: 78b926797fd15dbb72811fb50496cfa04e8e31c0f1c91a16fc27b5f87ce65420
eap8-bouncycastle-1.80.0-1.redhat_00001.1.el9eap.src.rpm SHA-256: b8f83e840cad922f9fb1172cc24639139b27e196924a8a082a60374e7afc707f
eap8-eap-product-conf-parent-800.7.0-2.GA_redhat_00002.1.el9eap.src.rpm SHA-256: 3dfbc89f1ad9dd9b6d5fffc469da0723c53ce6ca4f343bd50bf4c76e48675a49
eap8-hibernate-6.2.35-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: bd86b3fdfc92e454b100f01e0b7ed9665068c64fccb41a6974c161817b23c9e8
eap8-ironjacamar-3.0.13-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 262807a19fa597d9132f6e3043effe0852214cffb555ec3d3ba53dd37eb7f75e
eap8-jakarta-enterprise-concurrent-3.0.1-1.redhat_00001.1.el9eap.src.rpm SHA-256: fb62b7bafac02aa5c7cbb5df5b0130306c2caa3c3bca26f0530ee0ac0d2896a1
eap8-jsf-impl-4.0.11-1.redhat_00001.1.el9eap.src.rpm SHA-256: 6b9bca8b49a7c8746467c06a467ff9b532e5a9892b2d51c2d2bcd13867994ce0
eap8-reactive-streams-1.0.4-3.redhat_00004.1.el9eap.src.rpm SHA-256: 534272e25bb042675e4412d5254a1ed662deee48c8f0fcc87501339c6a6c3266
eap8-reactivex-rxjava-3.1.10-1.redhat_00001.1.el9eap.src.rpm SHA-256: 06488cfa62712b4c1a9add55feedaf83ff48da49d15184899937e0b06959411b
eap8-weld-core-5.1.5-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: bf81dc825df6d9e0ed1c824236cc97b71e909f5aecf0e49c57f454f5919c24ca
eap8-wildfly-8.0.7-3.GA_redhat_00004.1.el9eap.src.rpm SHA-256: e4dec90f84a34c32e4e9669b64245bbaa6888a7fd947d929f5348685fc84ec36
eap8-wildfly-elytron-2.2.9-1.Final_redhat_00001.1.el9eap.src.rpm SHA-256: 6c0098af6d3cc9ed7f42433aacd601fcb1cf334e74c5f9b5137de29200a5a222
x86_64
eap8-apache-commons-io-2.16.1-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 5db1181f59f45699c225c6c9e7be434b65da2903ab8870c7d4e8e9a6de48efc6
eap8-bouncycastle-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 9ea5f29a6c39509a0ae5d0bb760710d2a70b42fe976a24bfb44cdea544bfea90
eap8-bouncycastle-jmail-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: bde19fd9cabfd164c5f87837abe43642264a0c096127b3868ebdd028c5c4899c
eap8-bouncycastle-pg-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: d327ae2ef6f3ae88e447b278621dace447e65a0a6587277a2914f4bdc46f34a3
eap8-bouncycastle-pkix-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 4a93b24d26b3ea0567af9451556f3a035752308236fee8341e52e845086c8242
eap8-bouncycastle-prov-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 624e9ee28811302e3a9d9e7db569f7a161e643e60357abb834ee212e69398a9b
eap8-bouncycastle-util-1.80.0-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 29e4f62694a9237ab09ec2a4c6cd8b2f392c46128a5ffc8a9197626984341c58
eap8-eap-product-conf-parent-800.7.0-2.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: 75ede85a7953b7409e554b7819bc8ddff7aba837b41efeab67a4b18cdb62286a
eap8-eap-product-conf-wildfly-ee-feature-pack-800.7.0-2.GA_redhat_00002.1.el9eap.noarch.rpm SHA-256: 7d5f920c8d1f22e9671dd61ad15a56b70968bf7b87d437296cedd5ed92599234
eap8-hibernate-6.2.35-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 56397a697dd09b291a0da8d3ac827390f399e80ab14cfad24c3d6191496723e4
eap8-hibernate-core-6.2.35-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d988e02e9421bac71e2df792e8d227cfc533b61dd464045e039bfcca9e64f131
eap8-hibernate-envers-6.2.35-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 34ebe416939488725a4a6cf90d543b59243e3987813363e02fcdc7f0c7a6bf4a
eap8-ironjacamar-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 9db4474e55856635c95e4a029208f99a33810850a346c1ff6636401b7429ad47
eap8-ironjacamar-common-api-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 1a073f365d0aa28de77864000d68f4087e68feb354272b8294234a9aa44f322d
eap8-ironjacamar-common-impl-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: b8ea87e3c49347a7dadf905de556269b3dacd3953e73109b87a2f35aa89cd190
eap8-ironjacamar-common-spi-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: bb640266d4fd75cabdb108c9ff2a38aee51e6614f231cf76d979d611a8ab41b9
eap8-ironjacamar-core-api-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: cc10de47437897ce90f0ac14a1915c259fa610d14c105e6fa8d7ae4bb3e7addf
eap8-ironjacamar-core-impl-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 74bc7ed7dcdd133610b9cc736764b3b26fd76673fc08113f6bb292832c6bfd75
eap8-ironjacamar-deployers-common-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 608d67af5a4f3f94c370d075d909875f98da57316049ee44b77041c1eefb9a04
eap8-ironjacamar-jdbc-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 652a383edbef44882793301d83989db3f2ccf7c255edbd598c1323c531ac5c09
eap8-ironjacamar-validator-3.0.13-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 7ee21c2b431281d9d7433d7ca2d005b363d8b826454fa84e555782cabdbd433c
eap8-jakarta-enterprise-concurrent-3.0.1-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 6bf782d34a4b311c1dcce5cb5daf416246e9586a09eb4abe2a878098875e65c0
eap8-jsf-impl-4.0.11-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: fde118fa8985db205e1a28192c8bfffeb15afd134d3e0c611f018ffcdc9766eb
eap8-reactive-streams-1.0.4-3.redhat_00004.1.el9eap.noarch.rpm SHA-256: 6c6befa25017dea0d52da10596c0ec970e29ddf7c95c2bb2c888583b3ad18c38
eap8-reactivex-rxjava-3.1.10-1.redhat_00001.1.el9eap.noarch.rpm SHA-256: 246dd3480dcca3a28f73ddd701b13a43425f77a42e97f2cd17bab89d2c84c1a7
eap8-weld-core-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: db0d418798e931c4de1469405d4afd080715788d43b2c56e64bff37fa4fd7b44
eap8-weld-core-impl-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 629fb7a8d2405add05e15f98f582fff1abedb8ca157425e03d595165526bca85
eap8-weld-core-jsf-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: d7f2d0689ec3a540f42ddddfb373ce8d82bbe8f9b35b5e38751768dc6cfbadcb
eap8-weld-ejb-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: c84452420ae92415f5cea8d4d5bb0c266a9ee1d94bba22684dd80c27d327f529
eap8-weld-jta-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 647ab31012a197439f47ddab5824d4a0233a911e9a3dcec14506f5680afc9ffa
eap8-weld-lite-extension-translator-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 270c4b7b709dccc3f369288acc2a67551a46737b94f6c68c25a7befe91518213
eap8-weld-web-5.1.5-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 32493f337f55b45409444d99a31217448f2d782ef8a621e74600ba053c375678
eap8-wildfly-8.0.7-3.GA_redhat_00004.1.el9eap.noarch.rpm SHA-256: 61ce90d7c9322ee8a2c22c846843dbbfd21a993bd0a19c893bd4c9311f0e8118
eap8-wildfly-elytron-2.2.9-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: 24b99f993f582749d0ed3add977dcef7f17df9a5ca576c996043f0cf64ac44bf
eap8-wildfly-elytron-tool-2.2.9-1.Final_redhat_00001.1.el9eap.noarch.rpm SHA-256: f42a081a664c69747964ea8864d50463c7f57ba6e0527796759df21ef034ad1d
eap8-wildfly-java-jdk11-8.0.7-3.GA_redhat_00004.1.el9eap.noarch.rpm SHA-256: 3d247f75f226562ef09665f071e3184bae17ccb2237b8357e24f5785a3abb0ba
eap8-wildfly-java-jdk17-8.0.7-3.GA_redhat_00004.1.el9eap.noarch.rpm SHA-256: f5e97e7824ea0096e7eb47ad19d0bd307eb55431c838d3254e5d220a83183572
eap8-wildfly-java-jdk21-8.0.7-3.GA_redhat_00004.1.el9eap.noarch.rpm SHA-256: fdae3bf24f09e200022668e5fefc729daf6705701a25d55253cfda09d7f6688d
eap8-wildfly-modules-8.0.7-3.GA_redhat_00004.1.el9eap.noarch.rpm SHA-256: 3af54a2c59ccc57283e6f1f07ceec2c0d957eeadab4371ca55befaeca27001f3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.