RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.11 Security update (Important) (RHSA-2024:10207)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10207 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.0.3 Security update (Important) (RHSA-2024:5479)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5479 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.0.3 Security update (Important) (RHSA-2024:5481)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5481 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 3.20.6 for Spring Boot security update.

Red Hat build of Apache Camel 3.20.6 for Spring Boot release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.17 Security update (Important) (RHSA-2024:3560)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3560 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.17 Security update (Important) (RHSA-2024:3561)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3561 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.17 Security update (Important) (RHSA-2024:3559)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3559 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to server-side request forgery due to Apache CXF

Summary This security bulletin addresses the vulnerabilitiy in Open Source Apache CXF that affect IBM Tivoli Application Dependency Discovery Manager CVE-2024-28752. IBM Tivoli Application Dependency Discovery Manager is using Apache CXF for its SOAP API and REST API implementation. Vulnerability...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.4.SP1)

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available RHBQ 3.8.4.SP1. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...

(RHSA-2024:1948) Important: Red Hat Build of Apache Camel 3.18 for Quarkus 2.13 is now available (updates to RHBQ 2.13.9.SP2)

An update for Red Hat Build of Apache Camel 3.18 for Quarkus 2.13 is now available updates to RHBQ 2.13.9.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products: TRIAGE...

org.apache.cxf.systests:cxf-systests-databinding (2.4.8), org.apache.cxf.systests:cxf-systests-jaxrs (2.4.8) +12 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.4.8)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.4.8 -...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), edu.usc.ir:lucene-geo-gazetteer (0.2) +14 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.2.3)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =0.4.0, =1.15-rc1, =1.15-rc1,...

org.apache.cxf:apache-cxf (2.0.6), org.apache.cxf:cxf-distribution-manifest (2.0.6) +6 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.0.6)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.0.6 - org.apache.cxf:cxf-distribution-manifest 2.0.6 ...

org.objectweb.fractal.bf.connectors:fractal-bf-connectors-soap-cxf (0.4), org.objectweb.fractal.bf.examples:fractal-bf-examples-complex (0.4) +1 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.0.9)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.objectweb.fractal.bf.connectors:fractal-bf-connectors-soap-cxf 0.4 -...

org.apache.cxf:apache-cxf (2.0.12), org.apache.cxf:cxf-distribution-manifest (2.0.12) +1 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.0.12)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.0.12 - org.apache.cxf:cxf-distribution-manifest 2.0....