JBoss Enterprise Application Platform 8.0 Update 1 Release Notes

Updated

In order to better meet customer expectations, micro releases for JBoss EAP 8 have been discontinued and replaced with updates delivered on a repeating schedule.

Each new update will contain a number of bug fixes for customer reported issues and potentially a number of security fixes. We expect that the updates will substantially reduce the number of individual patches that we produce and that customers must manage to keep their installations up to date.

This update includes all fixes and changes from JBoss Enterprise Application Platform 8.0 GA

Download This content is not included.JBoss Enterprise Application Platform 8.0 Update 1

This update includes fixes for the following security related issues:

IDComponentImpactSummary
CVE-2023-4759ManagementModeratejgit: arbitrary file overwrite
CVE-2023-48795ServerModerateapache-sshd: ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
CVE-2023-35887ServerLowsshd-common: apache-mina-sshd: information exposure in SFTP server implementations

Installation

Archive / zip / installer based installations

Note: This update zip should only be applied to installer or zip-based installations.

See the documentation: JBoss EAP 8.0 update methods

RPM installations

See the documentation: Updating an RPM installation

OpenShift Container installations

Update the containers to use the This content is not included.latest tag., to be current on OpenJDK and RHEL fixes.

Notes

Category
Components
Article Type