logo
DATABASE RESOURCES PRICING ABOUT US

(RHSA-2017:1260) Moderate: jboss-ec2-eap security, bug fix, and enhancement update

Description

The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2). With this update, the jboss-ec2-eap package has been updated to ensure compatibility with Red Hat JBoss Enterprise Application Platform 6.4.15. Security Fix(es): * It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy. (CVE-2016-9606) Red Hat would like to thank Moritz Bechler (AgNO3 GmbH & Co. KG) for reporting these issues.


Affected Package


OS OS Version Package Name Package Version
RedHat 6 jboss-ec2-eap 7.5.15-3.Final_redhat_3.ep6.el6
RedHat 6 jboss-ec2-eap-samples 7.5.15-3.Final_redhat_3.ep6.el6
RedHat 6 jboss-ec2-eap 7.5.15-3.Final_redhat_3.ep6.el6

Related