What is RHSA-2014:0294?

RHSA-2014:0294 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: XStream security update

Which CVE IDs does RHSA-2014:0294 cover?

RHSA-2014:0294 covers the following CVE IDs: CVE-2013-7285. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:0294?

RHSA-2014:0294 affects 1 product, including: Red Hat JBoss Data Virtualization 6.0.

RHSA-2014:0294High

Red Hat Security Advisory: XStream security update

Vendor

Red Hat Product Security

Published

March 13, 2014

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2013-7285 →

📋 Description

CVE-2013-7285 — XStream: remote code execution due to insecure XML deserialization

🎯 Affected products1

Red Hat JBoss Data Virtualization 6.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2014:0294
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform&downloadType=securityPatches&version=6.0.0
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1051277
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0294.json