RHSA-2014:1019High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update

Published
August 6, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (7)

CVE-2014-0118 →CVE-2014-0193 →CVE-2014-0226 →CVE-2014-0227 →CVE-2014-0231 →CVE-2014-3464 →CVE-2014-3472 →

📋 Description

CVE-2014-0118 — httpd: mod_deflate denial of service CVE-2014-0193 — netty: DoS via memory exhaustion during data aggregation CVE-2014-0226 — httpd: mod_status heap-based buffer overflow CVE-2014-0227 — Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter CVE-2014-0231 — httpd: mod_cgid denial of service CVE-2014-3464 — WS: Incomplete fix for CVE-2013-2133 CVE-2014-3472 — Security: Invalid EJB caller role check implementation

🎯 Affected products200

  • Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-beanutils-eap6-0:1.8.3-7.redhat_6.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-beanutils-eap6-0:1.8.3-7.redhat_6.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-cli-eap6-0:1.2-6.redhat_4.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-cli-eap6-0:1.2-6.redhat_4.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-codec-eap6-0:1.4-16.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-codec-eap6-0:1.4-16.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-configuration-eap6-0:1.6-1.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-configuration-eap6-0:1.6-1.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-io-eap6-0:2.1-8.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-io-eap6-0:2.1-8.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-lang-eap6-0:2.6-8.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-commons-lang-eap6-0:2.6-8.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-mime4j-0:0.6-10.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • apache-mime4j-0:0.6-10.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • cal10n-eap6-0:0.7.3-2.redhat_4.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • cal10n-eap6-0:0.7.3-2.redhat_4.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-0:1.9.9-7.redhat_3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-0:1.9.9-7.redhat_3.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-core-asl-0:1.9.9-7.redhat_3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-jaxrs-0:1.9.9-7.redhat_3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-mapper-asl-0:1.9.9-7.redhat_3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • codehaus-jackson-xc-0:1.9.9-7.redhat_3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Server
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 References (49)