(RHSA-2024:4386) Moderate: Red Hat JBoss EAP 7.4.17 XP 4.0.2 security release

This asynchronous patch is a security update zip for the JBoss EAP XP 4.0.2 runtime distribution for use with EAP 7.4.17.

Security Fix(es):

• jose4j: denial of service via specially crafted JWE (CVE-2023-51775)

A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.