RHSA-2023:0756HighCVSS 8.6
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 XP 4.0.0.GA Security release
🔗 CVE IDs covered (2)
📋 Description
CVE-2021-0341 — okhttp: information disclosure via improperly used cryptographic function CVE-2022-47629 — libksba: integer overflow to code execution
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform Expansion Pack
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2023:0756
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/red_hat_jboss_eap_xp_4.0.0_release_notes/
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html/jboss_eap_xp_4.0_upgrade_and_migration_guide/index
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/using_jboss_eap_xp_4.0.0/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2154086
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2161571
- externalhttps://issues.redhat.com/browse/JBEAP-24408
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0756.json