(RHSA-2014:1821) Moderate: Red Hat JBoss Enterprise Application Platform 6.3.2 update

2014-11-0600:00:00

access.redhat.com

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.011 Low

EPSS

Percentile

82.4%

JSON

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.

A resource consumption issue was found in the way Xerces-J handled XML
declarations. A remote attacker could use an XML document with a specially
crafted declaration using a long pseudo-attribute name that, when parsed by
an application using Xerces-J, would cause that application to use an
excessive amount of CPU. (CVE-2013-4002)

This release of JBoss Enterprise Application Platform also includes bug
fixes and enhancements. A list of these changes is available from the JBoss
Enterprise Application Platform 6.3.2 Downloads page on the Customer
Portal.

All users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat
Enterprise Linux 5 are advised to upgrade to these updated packages.
The JBoss server process must be restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5noarchjboss-as-modcluster< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-modcluster-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat5srcjboss-as-jmx< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-jmx-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm
RedHat5srcjbossas-javadocs< 7.4.2-2.Final_redhat_2.1.ep6.el5jbossas-javadocs-7.4.2-2.Final_redhat_2.1.ep6.el5.src.rpm
RedHat5srcjboss-as-jacorb< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-jacorb-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm
RedHat5noarchjboss-as-jdr< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-jdr-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat5noarchjboss-as-deployment-repository< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-deployment-repository-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat5noarchjboss-as-version< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-version-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat5srcxml-security< 1.5.7-2.redhat_1.1.ep6.el5xml-security-1.5.7-2.redhat_1.1.ep6.el5.src.rpm
RedHat5noarchjboss-hal< 2.2.11-1.Final_redhat_1.1.ep6.el5jboss-hal-2.2.11-1.Final_redhat_1.1.ep6.el5.noarch.rpm
RedHat5srcjboss-as-pojo< 7.4.2-3.Final_redhat_2.1.ep6.el5jboss-as-pojo-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	noarch	jboss-as-modcluster	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-modcluster-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat	5	src	jboss-as-jmx	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-jmx-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm
RedHat	5	src	jbossas-javadocs	< 7.4.2-2.Final_redhat_2.1.ep6.el5	jbossas-javadocs-7.4.2-2.Final_redhat_2.1.ep6.el5.src.rpm
RedHat	5	src	jboss-as-jacorb	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-jacorb-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm
RedHat	5	noarch	jboss-as-jdr	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-jdr-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat	5	noarch	jboss-as-deployment-repository	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-deployment-repository-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat	5	noarch	jboss-as-version	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-version-7.4.2-3.Final_redhat_2.1.ep6.el5.noarch.rpm
RedHat	5	src	xml-security	< 1.5.7-2.redhat_1.1.ep6.el5	xml-security-1.5.7-2.redhat_1.1.ep6.el5.src.rpm
RedHat	5	noarch	jboss-hal	< 2.2.11-1.Final_redhat_1.1.ep6.el5	jboss-hal-2.2.11-1.Final_redhat_1.1.ep6.el5.noarch.rpm
RedHat	5	src	jboss-as-pojo	< 7.4.2-3.Final_redhat_2.1.ep6.el5	jboss-as-pojo-7.4.2-3.Final_redhat_2.1.ep6.el5.src.rpm