Red Hat Security Advisory: Red Hat JBoss Portal 5.2.2 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2011-2487 — jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key CVE-2011-2730 — Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure CVE-2012-5575 — apache-cxf: XML encryption backwards compatibility attacks
🎯 Affected products1
- Red Hat JBoss Portal 5.2
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up all applications deployed on Red Hat JBoss Portal, along with all customized configuration files, and any databases and database settings. Note that it is recommended to halt the Red Hat JBoss Portal server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the Red Hat JBoss Portal server by starting the JBoss Application Server process.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2013:0953
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=5.2.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=713539
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=737608
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=880443
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0953.json