What is RHSA-2007:0950?

RHSA-2007:0950 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Which CVE IDs does RHSA-2007:0950 cover?

RHSA-2007:0950 covers the following CVE IDs: CVE-2007-3382, CVE-2007-3385. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2007:0950?

RHSA-2007:0950 affects 109 products, including: Red Hat Application Stack v1 for Enterprise Linux AS (v.4); Red Hat Application Stack v1 for Enterprise Linux ES (v.4); Red Hat Application Stack v2 for Enterprise Linux (v.5); berkeleydb-0:2.0.90-1jpp.ep1.1.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5); berkeleydb-0:2.0.90-1jpp.ep1.1.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5); and others — see the full list on the advisory page.

RHSA-2007:0950Medium

Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Vendor

Red Hat Product Security

Published

November 5, 2007

Last Modified

November 21, 2025

🔗 CVE IDs covered (2)

CVE-2007-3382 →CVE-2007-3385 →

📋 Description

CVE-2007-3382 — tomcat handling of cookies CVE-2007-3385 — tomcat handling of cookie values

🎯 Affected products109

Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
Red Hat Application Stack v2 for Enterprise Linux (v.5)
berkeleydb-0:2.0.90-1jpp.ep1.1.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
berkeleydb-0:2.0.90-1jpp.ep1.1.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
berkeleydb-0:2.0.90-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
berkeleydb-0:2.0.90-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
berkeleydb-0:2.0.90-1jpp.ep1.1.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
berkeleydb-0:2.0.90-1jpp.ep1.1.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
bsh2-0:2.0-0.b4.1jpp.ep1.1.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
bsh2-0:2.0-0.b4.1jpp.ep1.1.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.2.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.2.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.3.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-annotations-0:3.2.1-1.patch01.1jpp.ep1.3.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-annotations-javadoc-0:3.2.1-1.patch01.1jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-annotations-javadoc-0:3.2.1-1.patch01.1jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-annotations-javadoc-0:3.2.1-1.patch01.1jpp.ep1.3.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-ejb-persistence-3.0-api-0:3.2.1-1jpp.ep1.1.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-ejb-persistence-3.0-api-javadoc-0:3.2.1-1jpp.ep1.1.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
hibernate3-ejb-persistence-3.0-api-javadoc-0:3.2.1-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
hibernate3-ejb-persistence-3.0-api-javadoc-0:3.2.1-1jpp.ep1.1.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-entitymanager-0:3.2.1-1jpp.ep1.5.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
+79 more not shown

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products109

✅ Remediation

🔗 References (7)