Red Hat JBoss EAP 8.1.7 Fixes Multiple Netty Vulnerabilities
Patch & Detection Intelligence · 4 sources · Updated 2mo ago · First seen Aug 20, 2026
Red Hat released JBoss Enterprise Application Platform 8.1.7 with an Important security update to remediate five vulnerabilities in bundled Netty components affecting JBoss EAP 8.1 deployments. The flaws can enable denial of service, information disclosure and data manipulation, hostname verification bypass, insufficient bailiwick validation for NS records, and an IPv6 subnet rule bypass, impacting JBoss EAP 8.1 on RHEL 8, RHEL 9, and RHEL 10 for x86_64 systems.
The fixes were published in Red Hat advisories RHSA-2026:49700 and RHSA-2026:49701, which update Netty in the JBoss EAP 8.1.z stream from 4.1.133.Final-redhat-00001 to 4.1.135.Final-redhat-00001. Red Hat’s product documentation and release materials for JBoss EAP 8.1 accompany the release, while the advisories direct customers to ensure prerequisite errata are applied, back up existing installations, and deploy the updated packages.
