What is RHSA-2017:1675?

RHSA-2017:1675 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss BPM Suite security update

Which CVE IDs does RHSA-2017:1675 cover?

RHSA-2017:1675 covers the following CVE IDs: CVE-2016-6346, CVE-2016-9606, CVE-2017-5929. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2017:1675?

RHSA-2017:1675 has a CVSS v3 base score of 8.1, published by Red Hat Product Security.

Which products are affected by RHSA-2017:1675?

RHSA-2017:1675 affects 1 product, including: Red Hat JBoss BPMS 6.4.

RHSA-2017:1675MediumCVSS 8.1

Red Hat Security Advisory: Red Hat JBoss BPM Suite security update

Vendor

Red Hat Product Security

Published

July 4, 2017

Last Modified

August 4, 2026

🔗 CVE IDs covered (3)

CVE-2016-6346 →CVE-2016-9606 →CVE-2017-5929 →

📋 Description

CVE-2016-6346 — RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack CVE-2016-9606 — Resteasy: Yaml unmarshalling vulnerable to RCE CVE-2017-5929 — logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

🎯 Affected products1

Red Hat JBoss BPMS 6.4

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update; after installing the update, restart the server by starting the JBoss Application Server process. The References section of this erratum contains a download link (you must log in to download the update). Workaround: Add authentication and authorization to any Resteasy endpoint which doesn't define a mime type, or defines a multipart mime type.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (7)