RHSA-2022:6823HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update

Published
October 5, 2022
Last Modified
August 10, 2026

🔗 CVE IDs covered (3)

CVE-2022-1259 →CVE-2022-2053 →CVE-2022-25857 →

📋 Description

CVE-2022-1259 — undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629) CVE-2022-2053 — undertow: Large AJP request may cause DoS CVE-2022-25857 — snakeyaml: Denial of Service due to missing nested depth limitation for collections

🎯 Affected products115

  • Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-0:2.16.0-10.redhat_00045.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-cli-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-commons-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-core-client-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-dto-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-hornetq-protocol-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-hqclient-protocol-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-jdbc-store-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-jms-client-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-jms-server-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-journal-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-ra-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-selector-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-server-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-service-extensions-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-activemq-artemis-tools-0:2.16.0-10.redhat_00045.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-glassfish-jsf-0:2.3.14-5.SP06_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-glassfish-jsf-0:2.3.14-5.SP06_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hal-console-0:3.3.14-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hal-console-0:3.3.14-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hibernate-0:5.3.28-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hibernate-0:5.3.28-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hibernate-core-0:5.3.28-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-hibernate-envers-0:5.3.28-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-ironjacamar-0:1.5.3-3.SP2_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-ironjacamar-0:1.5.3-3.SP2_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-ironjacamar-common-api-0:1.5.3-3.SP2_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • eap7-ironjacamar-common-impl-0:1.5.3-3.SP2_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 9
  • +85 more not shown

✅ Remediation

Before applying this update, ensure all previously released errata relevant to your system have been applied. For details about how to apply this update, see: https://access.redhat.com/articles/11258

🔗 References (23)