RHSA-2014:0511High
Red Hat Security Advisory: Red Hat JBoss Operations Network 3.2.1 security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2013-4286 — tomcat: multiple content-length header poisoning flaws CVE-2014-0114 — 1: Class Loader manipulation via request parameters
🎯 Affected products1
- Red Hat JBoss Operations Network 3.2
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Operations Network installation (including its databases, applications, configuration files, the JBoss Operations Network server's file system directory, and so on). Refer to the "Manual Instructions" section of the release description, available from the Customer Portal for this update, for installation information. Workaround: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Protect-your-Struts1-applications/ba-p/6463188#.VCaGk3V53Ua
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2014:0511
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=em&version=3.2.0
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1069921
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1091938
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0511.json