RHSA-2013:1844High
Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update
🔗 CVE IDs covered (4)
📋 Description
CVE-2012-6612 — Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler CVE-2013-6397 — Solr: directory traversal when loading XSL stylesheets and Velocity templates CVE-2013-6407 — Solr: XML eXternal Entity (XXE) flaw in XML and XSLT UpdateRequestHandler CVE-2013-6408 — Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler
🎯 Affected products1
- Red Hat JBoss Web Framework Kit 2.4
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of Red Hat JBoss Web Framework Kit. The JBoss server process must be restarted for this update to take effect.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2013:1844
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit&downloadType=securityPatches&version=2.4.0
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1035062
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1035981
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1035985
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1844.json