Search: CVE-2024-28752

Red Hat JBoss Enterprise Application Platform 8.0.3 addresses multiple important security vulnerabilities including SSRF in Apache CXF, timing attacks in BouncyCastle, resource allocation issues in Netty, infinite loops in ED25519 verification, and denial of service via crafted EC certificates. These vulnerabilities affect versions from 8.0.0 up to but not including 8.0.3. The update replaces version 8.0.2 and includes bug fixes and enhancements alongside security patches. Red Hat rates the security impact as important and provides an official fix in version 8.0.3.