Red Hat Security Advisory: commons-fileupload security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2013-2186 — commons-fileupload: Arbitrary file upload via deserialization
🎯 Affected products4
- JBoss Enterprise BRMS Platform 5.3
- Red Hat JBoss Portal 4.3
- Red Hat JBoss Portal 5.2
- Red Hat JBoss Portal Platform 6.0
✅ Remediation
The References section of this erratum contains download links (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss BRMS installation (including all applications and configuration files). For Red Hat JBoss Portal, back up all deployed applications, along with all customized configuration files, and any databases and database settings. Note that it is recommended to halt the JBoss Enterprise BRMS Platform server and the Red Hat JBoss Portal server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the JBoss Enterprise BRMS Platform server by starting the JBoss Application Server process.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2013:1430
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=5.3.1
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=4.3+CP07
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=5.2.2
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=securityPatches&version=6.0.0
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=974814
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1430.json