What is RHSA-2008:0158?

RHSA-2008:0158 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Which CVE IDs does RHSA-2008:0158 cover?

RHSA-2008:0158 covers the following CVE IDs: CVE-2007-4575, CVE-2007-5461, CVE-2007-6306, CVE-2007-6433, CVE-2008-0002. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2008:0158?

RHSA-2008:0158 affects 162 products, including: Red Hat Application Stack v1 for Enterprise Linux AS (v.4); Red Hat Application Stack v1 for Enterprise Linux ES (v.4); Red Hat Application Stack v2 for Enterprise Linux (v.5); concurrent-0:1.3.4-7jpp.ep1.6.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4); concurrent-0:1.3.4-7jpp.ep1.6.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4); and others — see the full list on the advisory page.

RHSA-2008:0158Medium

Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Vendor

Red Hat Product Security

Published

March 24, 2008

Last Modified

January 13, 2026

🔗 CVE IDs covered (5)

CVE-2007-4575 →CVE-2007-5461 →CVE-2007-6306 →CVE-2007-6433 →CVE-2008-0002 →

📋 Description

CVE-2007-4575 — OpenOffice.org-base allows Denial-of-Service and command injection CVE-2007-5461 — Absolute path traversal Apache Tomcat WEBDAV CVE-2007-6306 — JFreeChart: XSS vulnerabilities in the image map feature CVE-2007-6433 — EJBQL injection via 'order' parameter CVE-2008-0002 — Tomcat information disclosure vulnerability

🎯 Affected products162

Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
Red Hat Application Stack v2 for Enterprise Linux (v.5)
concurrent-0:1.3.4-7jpp.ep1.6.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
concurrent-0:1.3.4-7jpp.ep1.6.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
concurrent-0:1.3.4-7jpp.ep1.6.el4.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
concurrent-0:1.3.4-7jpp.ep1.6.el4.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
concurrent-0:1.3.4-8jpp.ep1.6.el5.1.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
concurrent-0:1.3.4-8jpp.ep1.6.el5.1.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-javamail-0:1.4.0-0jpp.ep1.8.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-javamail-0:1.4.0-0jpp.ep1.8.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-javamail-0:1.4.0-0jpp.ep1.8.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-javamail-0:1.4.0-0jpp.ep1.8.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.el5.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.el5.src as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.noarch as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)
glassfish-jstl-0:1.2.0-0jpp.ep1.2.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)
hibernate3-0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1.noarch as a component of Red Hat Application Stack v2 for Enterprise Linux (v.5)
+132 more not shown

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products162

✅ Remediation

🔗 References (8)