RHSA-2014:0172Medium
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update
🔗 CVE IDs covered (3)
📋 Description
CVE-2013-4517 — Java: Java XML Signature DoS Attack CVE-2013-6440 — Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter CVE-2014-0018 — jboss-as-server: Unchecked access to MSC Service Registry under JSM
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 6.2
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. For more details, refer to the JBoss Enterprise Application Platform 6.2.1 Release Notes, linked to in the References.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2014:0172
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.2.0
- externalhttps://access.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/6.2/html/6.2.1_Release_Notes/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1043332
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1045257
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1052783
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0172.json