Red Hat Security Advisory: RichFaces security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2013-2165 — RichFaces: Remote code execution due to insecure deserialization
🎯 Affected products10
- JBoss Enterprise BRMS Platform 5.3
- Red Hat JBoss Enterprise Application Platform 4.3
- Red Hat JBoss Enterprise Application Platform 5.2
- Red Hat JBoss Operations Network 2.4
- Red Hat JBoss Operations Network 3.1
- Red Hat JBoss Portal 4.3
- Red Hat JBoss Portal 5.2
- Red Hat JBoss SOA Platform 4.3
- Red Hat JBoss SOA Platform 5.3
- Red Hat JBoss Web Platform 5.2
✅ Remediation
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. For Red Hat JBoss Operations Network, also back up the Red Hat JBoss Operations Network server's file system directory. For Red Hat JBoss BRMS, Red Hat JBoss SOA Platform, and Red Hat JBoss Portal, it is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process. Refer to the Red Hat JBoss Operations Network Release Notes for installation information. The JBoss server process must be restarted for this update to take effect.
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2013:1045
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://access.redhat.com/site/documentation/
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=5.2.0
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=4.3.0.GA_CP10
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform&downloadType=securityPatches&version=5.2.0
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=5.3.1
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=soaplatform&downloadType=securityPatches&version=5.3.1+GA
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=soaplatform&version=4.3.0.GA_CP05
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=5.2.2
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=4.3+CP07
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=3.1.2
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=em&version=2.4.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=973570
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1045.json