RHSA-2023:1855MediumCVSS 7.5
Red Hat Security Advisory: Red Hat JBoss EAP 7.4.10 XP 4.0.0.GA security release
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-1278 — WildFly: possible information disclosure CVE-2022-3509 — protobuf-java: Textformat parsing issue leads to DoS CVE-2022-3510 — protobuf-java: Message-Type Extensions parsing issue leads to DoS
🎯 Affected products1
- Red Hat JBoss Enterprise Application Platform Expansion Pack
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2023:1855
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/red_hat_jboss_eap_xp_4.0.0_release_notes/index
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/jboss_eap_xp_4.0_upgrade_and_migration_guide/index
- externalhttps://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/using_jboss_eap_xp_4.0.0/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2073401
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2184161
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2184176
- externalhttps://issues.redhat.com/browse/JBEAP-24683
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1855.json