RHSA-2013:0763MediumCVSS 3.7
Red Hat Security Advisory: JBoss Web Framework Kit 2.2.0 update
🔗 CVE IDs covered (2)
📋 Description
CVE-2009-2625 — JDK: XML parsing Denial-Of-Service (6845701) CVE-2012-5783 — jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name
🎯 Affected products1
- Red Hat JBoss Web Framework Kit 2.2
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of JBoss Enterprise Application Platform or JBoss Enterprise Web Server, and applications deployed to it. The JBoss server process must be restarted for this update to take effect.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2013:0763
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit&downloadType=distributions
- externalhttps://access.redhat.com/site/documentation/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=512921
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=873317
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0763.json