logo
DATABASE RESOURCES PRICING ABOUT US

(RHSA-2018:2742) Important: Red Hat JBoss Enterprise Application Platform 6.4.21 security update

Description

Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 6.4.21 serves as a replacement for Red Hat JBoss Enterprise Application Platform 6.4.20, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Security Fix(es): * hibernate-validator: Privilege escalation when running under the security manager (CVE-2017-7536) * guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service (CVE-2018-10237) * picketlink: The fix for CVE-2017-2582 breaks the feature of attribute replacement with system property in picketlink.xml (CVE-2017-2582) * jbossweb: tomcat: A bug in the UTF-8 decoder can lead to DoS (CVE-2018-1336) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. The CVE-2017-2582 issue was discovered by Hynek Mlnarik (Red Hat) and the CVE-2017-7536 issue was discovered by Gunnar Morling (Red Hat).


Affected Package


OS OS Version Package Name Package Version
RedHat 5 jboss-as-appclient 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-osgi 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-host-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-ee 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-appclient 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-connector 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-osgi-configadmin 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-pojo 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-domain-management 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-modules 1.3.11-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-deployment-scanner 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-xts 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-remoting 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-ee-deployment 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-picketlink 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-xnio-base 3.0.17-1.GA_redhat_1.1.ep6.el5
RedHat 5 jboss-as-core-security 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-system-jmx 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 picketlink-bindings 2.5.4-23.SP18_redhat_2.1.ep6.el5
RedHat 5 jbossas-standalone 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-logging 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-welcome-content-eap 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-osgi-configadmin 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-mail 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-protocol 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-webservices 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-controller-client 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jdr 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jdr 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 xerces-j2-eap6 2.9.1-19.redhat_8.1.ep6.el5
RedHat 5 jboss-as-protocol 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-client-all 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 guava-libraries 13.0.1-5.redhat_3.1.ep6.el5
RedHat 5 jboss-vfs2 3.2.13-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-cli 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-controller-client 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-logging 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-domain-management 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-product-eap 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-threads 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-welcome-content-eap 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-network 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-threads 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-common-api-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 codehaus-jackson 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 jboss-as-appclient 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 codehaus-jackson-xc 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 guava-libraries 13.0.1-5.redhat_3.1.ep6.el5
RedHat 5 jboss-as-process-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-security 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 codehaus-jackson-mapper-asl 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 jboss-as-ee 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-deployment-repository 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-system-jmx 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jaxr 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-appclient 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-host-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-web 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-sar 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-webservices 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-deployment-scanner 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-web 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-core-impl-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-configadmin 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jmx 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 codehaus-jackson-core-asl 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 ironjacamar-validator-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-xts 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 codehaus-jackson-jaxrs 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 jboss-as-osgi-service 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-process-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-bundles 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-domain 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-clustering 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jacorb 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-ejb-client 1.0.41-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-server 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-ejb-client 1.0.41-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-spec-api-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-clustering 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jaxrs 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jpa 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-platform-mbean 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-client-all 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-ee-deployment 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-security 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-mail 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jsf 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-osgi 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-version 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-modules 1.3.11-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-javadocs 7.5.21-2.Final_redhat_1.2.ep6.el5
RedHat 5 jboss-as-modcluster 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 picketlink-federation 2.5.4-21.SP18_redhat_2.1.ep6.el5
RedHat 5 jbossweb 7.5.29-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-common-spi-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 hibernate4-validator 4.3.4-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jpa 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-platform-mbean 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-messaging 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-javadocs 7.5.21-2.Final_redhat_1.2.ep6.el5
RedHat 5 ironjacamar-core-api-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 ironjacamar-common-impl-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 hibernate4-validator 4.3.4-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 ironjacamar-deployers-common-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-management-client-content 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 hornetq 2.3.25-27.SP28_redhat_1.1.ep6.el5
RedHat 5 jboss-as-remoting 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-bundles 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-jdbc-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-modcluster 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-vfs2 3.2.13-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-transactions 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-server 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-naming 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-embedded 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-xnio-base 3.0.17-1.GA_redhat_1.1.ep6.el5
RedHat 5 jboss-as-core-security 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jacorb 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-cli 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-version 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-modules-eap 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-core 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-management-client-content 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 xerces-j2-eap6 2.9.1-19.redhat_8.1.ep6.el5
RedHat 5 jboss-as-jaxr 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-pojo 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-weld 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 picketlink-bindings 2.5.4-23.SP18_redhat_2.1.ep6.el5
RedHat 5 jboss-as-jsr77 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-embedded 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-naming 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-cmp 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-picketlink 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-osgi-service 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 codehaus-jackson 1.9.9-14.redhat_7.1.ep6.el5
RedHat 5 jboss-as-weld 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-connector 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-domain-http 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-ejb3 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-transactions 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossweb 7.5.29-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-product-eap 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-modules-eap 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-standalone 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-deployment-repository 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-domain-http 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-sar 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-ejb3 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 ironjacamar-eap6 1.0.42-2.Final_redhat_2.1.ep6.el5
RedHat 5 jboss-as-cmp 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jbossas-core 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jsr77 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-configadmin 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jaxrs 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jsf 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-controller 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-messaging 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-jmx 7.5.21-1.Final_redhat_1.1.ep6.el5
RedHat 5 picketlink-federation 2.5.4-21.SP18_redhat_2.1.ep6.el5
RedHat 5 hornetq 2.3.25-27.SP28_redhat_1.1.ep6.el5
RedHat 5 jbossas-domain 7.5.21-2.Final_redhat_1.1.ep6.el5
RedHat 5 jboss-as-network 7.5.21-1.Final_redhat_1.1.ep6.el5

Related