Red Hat Security Advisory: jbossweb security update

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products3

• Red Hat JBoss Enterprise Application Platform 4.2
• Red Hat JBoss Enterprise Application Platform 4.3
• Red Hat JBoss Enterprise Application Platform 5.1

✅ Remediation

A patch to correct CVE-2010-4476 for JBoss Enterprise Application Platform 4.2.0.CP09, 4.3.0.CP09, and 5.1 is available from the Red Hat Customer Portal. To download this patch: 1) Backup your existing JBoss Enterprise Application Platform installation (including all applications and configuration files). 2) Log into the Customer Portal: https://access.redhat.com/login 3) Navigate to https://access.redhat.com/jbossnetwork/restricted/listSoftware.html 4) On the left-hand side menu, under "JBoss Enterprise Platforms" click "Application Platform". Then, use the "Version:" drop down menu to select "4.2.0.GA_CP09", "4.3.0.GA_CP09", or "5.1.0". 5) The patch is available from the "Security Advisories" link. After applying the patch, the JBoss server process must be restarted for the update to take effect.

🔗 References (4)

• selfhttps://access.redhat.com/errata/RHSA-2011:0212
• externalhttps://access.redhat.com/security/updates/classification/#important
• externalhttps://bugzilla.redhat.com/show_bug.cgi?id=674336
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0212.json