RHSA-2014:0373Medium
Red Hat Security Advisory: Apache Commons Fileupload and JBoss Web security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2013-4286 — tomcat: multiple content-length header poisoning flaws CVE-2014-0050 — apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream
🎯 Affected products2
- Red Hat JBoss BPMS 6.0
- Red Hat JBoss BRMS 6.0
✅ Remediation
The References section of this erratum contains download links (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2014:0373
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=6.0.1
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.0.1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1062337
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1069921
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0373.json