HighFix available
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update
Type: advisorySources: OSV
- Products
- eap8-wildfly, eap8-wildfly-java-jdk17, eap8-wildfly-java-jdk21, eap8-wildfly-modules
- Affected versions
- Not specified
- Fixed versions
- 0:8.1.4-2.GA_redhat_00005.1.el8eap
- CVEs
- CVE-2025-12183, CVE-2025-66566
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 03:43 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update
core-osv · Original sourcePublished 5 Feb 2026, 10:09 UTC
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update
osv:RHSA-2026:1870
eap8-wildfly
Fixed versions: 0:8.1.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk17
Fixed versions: 0:8.1.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk21
Fixed versions: 0:8.1.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-modules
Fixed versions: 0:8.1.4-2.GA_redhat_00005.1.el8eap
Complete source record
{
"id": "682ca129e05ec1f44f13608347e20c0ec244a162936bc5c73b70966d56c05ac0",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A1870",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update",
"summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.4 security update",
"evidence": "osv:RHSA-2026:1870",
"products": [
{
"name": {
"value": "eap8-wildfly",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.1.4-2.GA_redhat_00005.1.el8eap",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-java-jdk17",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.1.4-2.GA_redhat_00005.1.el8eap",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-java-jdk21",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.1.4-2.GA_redhat_00005.1.el8eap",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-modules",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.1.4-2.GA_redhat_00005.1.el8eap",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2026:1870",
"aliases": [
"RHSA-2026:1870"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.1.4-2.GA_redhat_00005.1.el8eap"
}
]
}
],
"package": {
"name": "eap8-wildfly",
"purl": "pkg:rpm/redhat/eap8-wildfly",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.1::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:1870.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.1.4-2.GA_redhat_00005.1.el8eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-java-jdk17",
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.1::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:1870.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.1.4-2.GA_redhat_00005.1.el8eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-java-jdk21",
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.1::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:1870.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.1.4-2.GA_redhat_00005.1.el8eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-modules",
"purl": "pkg:rpm/redhat/eap8-wildfly-modules",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.1::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:1870.json"
}
}
],
"modified": "2026-10-07T10:06:55Z",
"provider": "osv",
"upstream": [
"CVE-2025-12183",
"CVE-2025-66566"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:1870",
"https://access.redhat.com/security/updates/classification/#important",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index",
"https://access.redhat.com/articles/7136166",
"https://bugzilla.redhat.com/show_bug.cgi?id=2417718",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419500",
"https://issues.redhat.com/browse/JBEAP-31416",
"https://issues.redhat.com/browse/JBEAP-31437",
"https://issues.redhat.com/browse/JBEAP-31454",
"https://issues.redhat.com/browse/JBEAP-31498",
"https://issues.redhat.com/browse/JBEAP-31543",
"https://issues.redhat.com/browse/JBEAP-31547",
"https://issues.redhat.com/browse/JBEAP-31559",
"https://issues.redhat.com/browse/JBEAP-31567",
"https://issues.redhat.com/browse/JBEAP-31572",
"https://issues.redhat.com/browse/JBEAP-31577",
"https://issues.redhat.com/browse/JBEAP-31595",
"https://issues.redhat.com/browse/JBEAP-31676",
"https://issues.redhat.com/browse/JBEAP-31680",
"https://issues.redhat.com/browse/JBEAP-31690",
"https://issues.redhat.com/browse/JBEAP-31762",
"https://issues.redhat.com/browse/JBEAP-31767",
"https://issues.redhat.com/browse/JBEAP-31800",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1870.json",
"https://access.redhat.com/security/cve/CVE-2025-12183",
"https://www.cve.org/CVERecord?id=CVE-2025-12183",
"https://nvd.nist.gov/vuln/detail/CVE-2025-12183",
"https://github.com/yawkat/lz4-java/releases/tag/v1.8.1",
"https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183",
"https://access.redhat.com/security/cve/CVE-2025-66566",
"https://www.cve.org/CVERecord?id=CVE-2025-66566",
"https://nvd.nist.gov/vuln/detail/CVE-2025-66566",
"https://github.com/yawkat/lz4-java/commit/33d180cb70c4d93c80fb0dc3ab3002f457e93840",
"https://github.com/yawkat/lz4-java/security/advisories/GHSA-cmp6-m4wj-q63q"
]
},
"related_cves": [
{
"value": "CVE-2025-12183",
"evidence": "/upstream"
},
{
"value": "CVE-2025-66566",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 94724,
"published_at": "2026-02-05T10:09:43+00:00"
}