RHSA-2025:10925

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2025:10925

Import Source

https://security.access.redhat.com/data/osv/RHSA-2025:10925.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2025:10925

Upstream

CVE-2024-10234

CVE-2025-2251

CVE-2025-23184

CVE-2025-2901

CVE-2025-35036

CVE-2025-48734

Published

2025-07-15T10:08:01Z

Modified

2025-07-15T11:01:11.073396Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

Details

References

Affected packages

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis

Package

Name: eap7-activemq-artemis
Purl: pkg:rpm/redhat/eap7-activemq-artemis

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-cli

Package

Name: eap7-activemq-artemis-cli
Purl: pkg:rpm/redhat/eap7-activemq-artemis-cli

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-commons

Package

Name: eap7-activemq-artemis-commons
Purl: pkg:rpm/redhat/eap7-activemq-artemis-commons

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-core-client

Package

Name: eap7-activemq-artemis-core-client
Purl: pkg:rpm/redhat/eap7-activemq-artemis-core-client

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-dto

Package

Name: eap7-activemq-artemis-dto
Purl: pkg:rpm/redhat/eap7-activemq-artemis-dto

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-hornetq-protocol

Package

Name: eap7-activemq-artemis-hornetq-protocol
Purl: pkg:rpm/redhat/eap7-activemq-artemis-hornetq-protocol

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-hqclient-protocol

Package

Name: eap7-activemq-artemis-hqclient-protocol
Purl: pkg:rpm/redhat/eap7-activemq-artemis-hqclient-protocol

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-jdbc-store

Package

Name: eap7-activemq-artemis-jdbc-store
Purl: pkg:rpm/redhat/eap7-activemq-artemis-jdbc-store

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-jms-client

Package

Name: eap7-activemq-artemis-jms-client
Purl: pkg:rpm/redhat/eap7-activemq-artemis-jms-client

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-jms-server

Package

Name: eap7-activemq-artemis-jms-server
Purl: pkg:rpm/redhat/eap7-activemq-artemis-jms-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-journal

Package

Name: eap7-activemq-artemis-journal
Purl: pkg:rpm/redhat/eap7-activemq-artemis-journal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-ra

Package

Name: eap7-activemq-artemis-ra
Purl: pkg:rpm/redhat/eap7-activemq-artemis-ra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-selector

Package

Name: eap7-activemq-artemis-selector
Purl: pkg:rpm/redhat/eap7-activemq-artemis-selector

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-server

Package

Name: eap7-activemq-artemis-server
Purl: pkg:rpm/redhat/eap7-activemq-artemis-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-service-extensions

Package

Name: eap7-activemq-artemis-service-extensions
Purl: pkg:rpm/redhat/eap7-activemq-artemis-service-extensions

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-activemq-artemis-tools

Package

Name: eap7-activemq-artemis-tools
Purl: pkg:rpm/redhat/eap7-activemq-artemis-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.16.0-21.redhat_00055.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-apache-cxf

Package

Name: eap7-apache-cxf
Purl: pkg:rpm/redhat/eap7-apache-cxf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.5.10-1.redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-apache-cxf-rt

Package

Name: eap7-apache-cxf-rt
Purl: pkg:rpm/redhat/eap7-apache-cxf-rt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.5.10-1.redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-apache-cxf-services

Package

Name: eap7-apache-cxf-services
Purl: pkg:rpm/redhat/eap7-apache-cxf-services

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.5.10-1.redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-apache-cxf-tools

Package

Name: eap7-apache-cxf-tools
Purl: pkg:rpm/redhat/eap7-apache-cxf-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.5.10-1.redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-artemis-native

Package

Name: eap7-artemis-native
Purl: pkg:rpm/redhat/eap7-artemis-native

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.0.2-5.redhat_00004.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-artemis-native-wildfly

Package

Name: eap7-artemis-native-wildfly
Purl: pkg:rpm/redhat/eap7-artemis-native-wildfly

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.0.2-5.redhat_00004.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-elytron-web

Package

Name: eap7-elytron-web
Purl: pkg:rpm/redhat/eap7-elytron-web

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.9.6-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-glassfish-jsf

Package

Name: eap7-glassfish-jsf
Purl: pkg:rpm/redhat/eap7-glassfish-jsf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.3.14-9.SP10_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-hal-console

Package

Name: eap7-hal-console
Purl: pkg:rpm/redhat/eap7-hal-console

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.3.27-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-hibernate-validator

Package

Name: eap7-hibernate-validator
Purl: pkg:rpm/redhat/eap7-hibernate-validator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:6.0.23-3.SP2_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-hibernate-validator-cdi

Package

Name: eap7-hibernate-validator-cdi
Purl: pkg:rpm/redhat/eap7-hibernate-validator-cdi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:6.0.23-3.SP2_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar

Package

Name: eap7-ironjacamar
Purl: pkg:rpm/redhat/eap7-ironjacamar

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-common-api

Package

Name: eap7-ironjacamar-common-api
Purl: pkg:rpm/redhat/eap7-ironjacamar-common-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-common-impl

Package

Name: eap7-ironjacamar-common-impl
Purl: pkg:rpm/redhat/eap7-ironjacamar-common-impl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-common-spi

Package

Name: eap7-ironjacamar-common-spi
Purl: pkg:rpm/redhat/eap7-ironjacamar-common-spi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-core-api

Package

Name: eap7-ironjacamar-core-api
Purl: pkg:rpm/redhat/eap7-ironjacamar-core-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-core-impl

Package

Name: eap7-ironjacamar-core-impl
Purl: pkg:rpm/redhat/eap7-ironjacamar-core-impl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-deployers-common

Package

Name: eap7-ironjacamar-deployers-common
Purl: pkg:rpm/redhat/eap7-ironjacamar-deployers-common

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-jdbc

Package

Name: eap7-ironjacamar-jdbc
Purl: pkg:rpm/redhat/eap7-ironjacamar-jdbc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-ironjacamar-validator

Package

Name: eap7-ironjacamar-validator
Purl: pkg:rpm/redhat/eap7-ironjacamar-validator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.5.21-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-jboss-server-migration

Package

Name: eap7-jboss-server-migration
Purl: pkg:rpm/redhat/eap7-jboss-server-migration

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.10.0-42.Final_redhat_00042.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-jboss-server-migration-cli

Package

Name: eap7-jboss-server-migration-cli
Purl: pkg:rpm/redhat/eap7-jboss-server-migration-cli

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.10.0-42.Final_redhat_00042.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-jboss-server-migration-core

Package

Name: eap7-jboss-server-migration-core
Purl: pkg:rpm/redhat/eap7-jboss-server-migration-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.10.0-42.Final_redhat_00042.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-jbossws-cxf

Package

Name: eap7-jbossws-cxf
Purl: pkg:rpm/redhat/eap7-jbossws-cxf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:5.4.15-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-undertow-server

Package

Name: eap7-undertow-server
Purl: pkg:rpm/redhat/eap7-undertow-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.9.6-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly

Package

Name: eap7-wildfly
Purl: pkg:rpm/redhat/eap7-wildfly

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-elytron

Package

Name: eap7-wildfly-elytron
Purl: pkg:rpm/redhat/eap7-wildfly-elytron

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.26-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-elytron-tool

Package

Name: eap7-wildfly-elytron-tool
Purl: pkg:rpm/redhat/eap7-wildfly-elytron-tool

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.26-1.Final_redhat_00001.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-java-jdk11

Package

Name: eap7-wildfly-java-jdk11
Purl: pkg:rpm/redhat/eap7-wildfly-java-jdk11

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-java-jdk17

Package

Name: eap7-wildfly-java-jdk17
Purl: pkg:rpm/redhat/eap7-wildfly-java-jdk17

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-java-jdk8

Package

Name: eap7-wildfly-java-jdk8
Purl: pkg:rpm/redhat/eap7-wildfly-java-jdk8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-javadocs

Package

Name: eap7-wildfly-javadocs
Purl: pkg:rpm/redhat/eap7-wildfly-javadocs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap

Red Hat:jboss_enterprise_application_platform:7.4::el8 / eap7-wildfly-modules

Package

Name: eap7-wildfly-modules
Purl: pkg:rpm/redhat/eap7-wildfly-modules

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.4.23-3.GA_redhat_00002.1.el8eap