RHSA-2017:1659HighCVSS 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update
🔗 CVE IDs covered (4)
📋 Description
CVE-2016-2177 — openssl: Possible integer overflow vulnerabilities in codebase CVE-2016-2178 — openssl: Non-constant time codepath followed for certain operations in DSA implementation CVE-2016-6304 — openssl: OCSP Status Request extension unbounded memory growth CVE-2016-8610 — SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform 6.4
✅ Remediation
Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contains a download link (you must log in to download the update).
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2017:1659
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/articles/2688611
- externalhttps://access.redhat.com/solutions/222023
- externalhttps://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1341705
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1343400
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1377600
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1384743
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1659.json