Issued:: 2013-05-20
Updated:: 2013-05-20

RHSA-2013:0839 - Important: JBoss Enterprise Application Platform 6.1.0 update

Synopsis

Important: JBoss Enterprise Application Platform 6.1.0 update

Type/Severity

Security Advisory Important

Topic

Updated JBoss Enterprise Application Platform 6.1.0 packages that fix three security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Description

JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.

This release serves as a replacement for JBoss Enterprise Application Platform 6.0.1, and includes bug fixes and enhancements. Refer to the 6.1.0 Release Notes for information on the most significant of these changes, available shortly from https://access.redhat.com/site/documentation/

Security fixes:

XML encryption backwards compatibility attacks were found against various frameworks, including Apache CXF. An attacker could force a server to use insecure, legacy cryptosystems, even when secure cryptosystems were enabled on endpoints. By forcing the use of legacy cryptosystems, flaws such as CVE-2011-1096 and CVE-2011-2487 would be exposed, allowing plain text to be recovered from cryptograms and symmetric keys. (CVE-2012-5575)

Note: Automatic checks to prevent CVE-2012-5575 are only run when WS-SecurityPolicy is used to enforce security requirements. It is best practice to use WS-SecurityPolicy to enforce security requirements.

When applications running on JBoss Web used the COOKIE session tracking method, the org.apache.catalina.connector.Response.encodeURL() method returned the URL with the jsessionid appended as a query string parameter when processing the first request of a session. An attacker could possibly exploit this flaw by performing a man-in-the-middle attack to obtain a user's jsessionid and hijack their session, or by extracting the jsessionid from log files. Note that no session tracking method is used by default, one must be configured. (CVE-2012-4529)

If multiple applications used the same custom authorization module class name, and provided their own implementations of it, the first application to be loaded will have its implementation used for all other applications using the same custom authorization module class name. A local attacker could use this flaw to deploy a malicious application that provides implementations of custom authorization modules that permit or deny user access according to rules supplied by the attacker. (CVE-2012-4572)

Red Hat would like to thank Tibor Jager, Kenneth G. Paterson and Juraj Somorovsky of Ruhr-University Bochum for reporting CVE-2012-5575. CVE-2012-4572 was discovered by Josef Cacek of the Red Hat JBoss EAP Quality Engineering team.

Warning: Before applying this update, back up your existing JBoss Enterprise Application Platform installation and deployed applications. Refer to the Solution section for further details.

All users of JBoss Enterprise Application Platform 6.0.1 on Red Hat Enterprise Linux 5 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up any customized JBoss Enterprise Application Platform 6 configuration files. On update, the configuration files that have been locally modified will not be updated. The updated version of such files will be stored as the rpmnew files. Make sure to locate any such files after the update and merge any changes manually.

For more details, refer to the Release Notes for JBoss Enterprise Application Platform 6.1.0, available shortly from https://access.redhat.com/site/documentation/

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Product	Version	Arch
JBoss Enterprise Application Platform	6	x86_64
JBoss Enterprise Application Platform	6	i386
JBoss Enterprise Application Platform	6.4	x86_64
JBoss Enterprise Application Platform	6.4	i386

Updated Packages

jbosgi-metadata-2.2.0-1.Final_redhat_1.ep6.el5.src.rpm
jboss-metadata-web-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-console-1.5.2-1.Final_redhat_1.ep6.el5.src.rpm
httpcomponents-client-4.2.1-7.redhat_1.ep6.el5.noarch.rpm
jbossas-appclient-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-remoting3-3.2.16-1.GA_redhat_1.ep6.el5.src.rpm
infinispan-5.2.6-1.Final_redhat_1.ep6.el5.noarch.rpm
picketlink-federation-2.1.6-3.Final_redhat_2.ep6.el5.noarch.rpm
jboss-as-threads-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-dmr-1.1.6-1.Final_redhat_1.ep6.el5.src.rpm
jboss-jms-api_1.1_spec-1.0.1-6.Final_redhat_2.ep6.el5.src.rpm
jboss-logmanager-1.4.0-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-messaging-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-osgi-configadmin-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-jaxrs-api_1.1_spec-1.0.1-7.Final_redhat_2.ep6.el5.noarch.rpm
jboss-as-ejb3-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-jaxrpc-api_1.1_spec-1.0.1-4.Final_redhat_3.ep6.el5.src.rpm
jboss-as-pojo-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-common-beans-1.1.0-1.Final_redhat_1.ep6.el5.noarch.rpm
hornetq-2.3.1-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-platform-mbean-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-marshalling-1.3.16-.GA.redhat_1.ep6.el5.src.rpm
httpcore-4.2.1-7.redhat_1.ep6.el5.noarch.rpm
jboss-as-cmp-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
ironjacamar-1.0.17-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-jdr-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-security-negotiation-2.2.5-1.Final_redhat_1.ep6.el5.src.rpm
jboss-threads-2.1.0-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-protocol-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
xml-commons-resolver-eap6-1.2-10.redhat_3.ep6.el5.4.noarch.rpm
jbosgi-vfs-1.2.1-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-jsr77-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-naming-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
h2database-1.3.168-3_redhat_2.ep6.el5.noarch.rpm
hibernate4-infinispan-4.2.0-4.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-server-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-clustering-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-embedded-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-transactions-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jcip-annotations-1.0-3.redhat_3.ep6.el5.noarch.rpm
relaxngDatatype-eap6-2011.1-4.redhat_6.ep6.el5.noarch.rpm
jboss-as-controller-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-jmx-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossas-javadocs-7.2.0-7.Final_redhat_7.ep6.el5.noarch.rpm
jbosgi-framework-core-2.1.0-2.Final_redhat_1.ep6.el5.src.rpm
weld-core-1.1.13-1.Final_redhat_1.ep6.el5.1.src.rpm
hibernate4-envers-4.2.0-4.Final_redhat_1.ep6.el5.noarch.rpm
org.osgi.enterprise-4.2.0-9.redhat_3.ep6.el5.noarch.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-1.redhat_1.ep6.el5.i386.rpm
jbosgi-repository-2.1.0-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-modcluster-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbossws-api-1.0.1-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossas-core-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
relaxngDatatype-eap6-2011.1-4.redhat_6.ep6.el5.src.rpm
hibernate4-4.2.0-4.Final_redhat_1.ep6.el5.src.rpm
jboss-servlet-api_3.0_spec-1.0.2-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-host-controller-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
slf4j-1.7.2-10.redhat_1.ep6.el5.noarch.rpm
infinispan-client-hotrod-5.2.6-1.Final_redhat_1.ep6.el5.noarch.rpm
jbosgi-deployment-1.3.0-2.Final_redhat_1.ep6.el5.src.rpm
apache-cxf-2.6.6-20.redhat_3.ep6.el5.noarch.rpm
objectweb-asm-eap6-3.3.1-6.2.redhat_4.ep6.el5.src.rpm
jansi-1.9-2.redhat_1.ep6.el5.noarch.rpm
openws-1.4.2-9_redhat_3.ep6.el5.src.rpm
jboss-as-deployment-repository-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
relaxngDatatype-2011.1-4.redhat_6.ep6.el5.src.rpm
hornetq-native-2.3.1-1.Final_redhat_1.ep6.el5.x86_64.rpm
sun-ws-metadata-2.0-api-1.0.MR1-12_MR1_redhat_3.ep6.el5.5.src.rpm
jboss-as-appclient-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossweb-7.2.0-2.redhat_1.ep6.el5.src.rpm
infinispan-5.2.6-1.Final_redhat_1.ep6.el5.src.rpm
atinject-1-9.redhat_3.ep6.el5.noarch.rpm
org.osgi.core-4.2.0-9.redhat_3.ep6.el5.noarch.rpm
jbossas-domain-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-cmp-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbosgi-metadata-2.2.0-1.Final_redhat_1.ep6.el5.noarch.rpm
woodstox-stax2-api-3.1.1-7.redhat_3.ep6.el5.noarch.rpm
httpd-tools-2.2.22-19.ep6.el5.x86_64.rpm
glassfish-jaxb-eap6-2.2.5-14.redhat_5.ep6.el5.src.rpm
mod_cluster-native-1.2.4-1.Final.redhat_1.ep6.el5.src.rpm
jbossws-cxf-4.1.3-1.Final_redhat_3.ep6.el5.2.src.rpm
jboss-as-osgi-service-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-metadata-appclient-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
resteasy-2.3.6-1.Final_redhat_1.ep6.el5.noarch.rpm
codehaus-jackson-core-asl-1.9.9-4.redhat_2.ep6.el5.noarch.rpm
jboss-as-transactions-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbossws-common-tools-1.1.0-1.Final_redhat_1.ep6.el5.src.rpm
org.osgi-4.2.0-9.redhat_3.ep6.el5.src.rpm
jboss-as-ejb3-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-jaxrs-api_1.1_spec-1.0.1-7.Final_redhat_2.ep6.el5.src.rpm
joda-time-1.6.2-5.redhat_4.ep6.el5.5.src.rpm
slf4j-jboss-logmanager-1.0.2-1.GA_redhat_1.3.ep6.el5.2.noarch.rpm
apache-commons-daemon-eap6-1.0.15-4.redhat_1.ep6.el5.noarch.rpm
mod_cluster-demo-1.2.4-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-deployment-scanner-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-configadmin-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-domain-http-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
cxf-xjc-dv-2.6.0-1.redhat_1.ep6.el5.noarch.rpm
jboss-as-jdr-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-jaxrs-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-network-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-remote-naming-1.0.6-2.Final_redhat_2.ep6.el5.noarch.rpm
jboss-jaxrpc-api_1.1_spec-1.0.1-4.Final_redhat_3.ep6.el5.noarch.rpm
jboss-as-appclient-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
glassfish-jsf-2.1.19-2.redhat_1.ep6.el5.noarch.rpm
jboss-as-host-controller-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
codehaus-jackson-xc-1.9.9-4.redhat_2.ep6.el5.noarch.rpm
jboss-as-jaxrs-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
mod_cluster-native-1.2.4-1.Final.redhat_1.ep6.el5.i386.rpm
jboss-transaction-api_1.1_spec-1.0.1-6.Final_redhat_2.ep6.el5.noarch.rpm
jboss-as-webservices-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
velocity-eap6-1.7-2.1.redhat_2.ep6.el5.noarch.rpm
objectweb-asm-eap6-3.3.1-6.2.redhat_4.ep6.el5.noarch.rpm
glassfish-jsf-2.1.19-2.redhat_1.ep6.el5.src.rpm
apache-commons-pool-eap6-1.6-6.redhat_4.ep6.el5.src.rpm
jboss-as-weld-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
httpmime-4.2.1-7.redhat_1.ep6.el5.noarch.rpm
jbossas-product-eap-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-security-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
relaxngDatatype-2011.1-4.redhat_6.ep6.el5.noarch.rpm
jboss-threads-2.1.0-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossts-4.17.4-3.Final_redhat_2.ep6.el5.noarch.rpm
jboss-as-cli-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbossws-spi-2.1.2-1.Final_redhat_1.ep6.el5.src.rpm
woodstox-core-4.2.0-7.redhat_2.ep6.el5.src.rpm
jboss-as-jsf-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
xerces-j2-eap6-2.9.1-14_redhat_4.ep6.el5.src.rpm
glassfish-javamail-1.4.5-1.redhat_1.ep6.el5.noarch.rpm
jbosgi-spi-3.2.0-1.Final_redhat_1.ep6.el5.noarch.rpm
httpd-2.2.22-19.ep6.el5.i386.rpm
jbossas-product-eap-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jgroups-3.2.7-1.Final_redhat_1.ep6.el5.src.rpm
glassfish-jaxb-2.2.5-14.redhat_5.ep6.el5.noarch.rpm
jacorb-jboss-2.3.2-11.redhat_4.ep6.el5.noarch.rpm
hibernate4-validator-4.3.1-1.Final_redhat_1.1.ep6.el5.5.src.rpm
openws-1.4.2-9_redhat_3.ep6.el5.noarch.rpm
jbossts-4.17.4-3.Final_redhat_2.ep6.el5.src.rpm
atinject-1-9.redhat_3.ep6.el5.src.rpm
jboss-as-version-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
infinispan-cachestore-remote-5.2.6-1.Final_redhat_1.ep6.el5.noarch.rpm
httpclient-4.2.1-7.redhat_1.ep6.el5.noarch.rpm
jcip-annotations-eap6-1.0-3.1.redhat_3.ep6.el5.src.rpm
jboss-metadata-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-protocol-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
httpcomponents-project-6-7.redhat_1.ep6.el5.noarch.rpm
jbosgi-resolver-3.0.1-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-sar-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
mod_ssl-2.2.22-19.ep6.el5.x86_64.rpm
jboss-logmanager-1.4.0-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-modcluster-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-webservices-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossws-api-1.0.1-1.Final_redhat_1.ep6.el5.src.rpm
jbossas-core-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
glassfish-jsf12-1.2_15-12_b01_redhat_3.ep6.el5.noarch.rpm
jboss-as-configadmin-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
mod_ssl-2.2.22-19.ep6.el5.i386.rpm
jboss-as-web-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-jacorb-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbosgi-resolver-3.0.1-1.Final_redhat_1.ep6.el5.src.rpm
xml-commons-resolver-eap6-1.2-10.redhat_3.ep6.el5.4.src.rpm
httpcomponents-core-4.2.1-7.redhat_1.ep6.el5.noarch.rpm
jboss-as-jsr77-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-domain-management-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-xts-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
cxf-xjc-boolean-2.6.0-1.redhat_1.ep6.el5.noarch.rpm
jboss-as-domain-management-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jul-to-slf4j-stub-1.0.1-1.Final_redhat_1.1.ep6.el5.2.src.rpm
jboss-as-jacorb-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jcip-annotations-eap6-1.0-3.1.redhat_3.ep6.el5.noarch.rpm
jbossws-common-2.1.1-1.Final_redhat_2.ep6.el5.src.rpm
tomcat-native-1.1.27-4.redhat_1.ep6.el5.i386.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-1.redhat_1.ep6.el5.x86_64.rpm
jboss-as-system-jmx-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
mod_jk-ap22-1.2.37-2.redhat_1.ep6.el5.x86_64.rpm
jboss-servlet-api_3.0_spec-1.0.2-1.Final_redhat_1.ep6.el5.src.rpm
jbossws-spi-2.1.2-1.Final_redhat_1.ep6.el5.noarch.rpm
opensaml-2.5.1-1.redhat_1.ep6.el5.2.noarch.rpm
jbosgi-vfs-1.2.1-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-jsf-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-pojo-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-client-all-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-controller-client-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-mail-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbossas-standalone-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-metadata-ejb-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-remoting3-jmx-1.1.0-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-ee-deployment-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
velocity-eap6-1.7-2.1.redhat_2.ep6.el5.src.rpm
jbossas-jbossweb-native-1.1.27-4.redhat_1.ep6.el5.i386.rpm
jboss-msc-1.0.4-1.GA_redhat_1.ep6.el5.src.rpm
jboss-as-jpa-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossws-native-4.1.1-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossas-welcome-content-eap-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-client-all-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
mod_cluster-native-1.2.4-1.Final.redhat_1.ep6.el5.x86_64.rpm
woodstox-core-4.2.0-7.redhat_2.ep6.el5.noarch.rpm
slf4j-eap6-1.7.2-10.redhat_1.ep6.el5.noarch.rpm
jbossas-welcome-content-eap-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
resteasy-2.3.6-1.Final_redhat_1.ep6.el5.src.rpm
hibernate4-validator-4.3.1-1.Final_redhat_1.1.ep6.el5.5.noarch.rpm
wss4j-1.6.9-2.redhat_2.ep6.el5.src.rpm
jboss-metadata-ear-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
jansi-1.9-2.redhat_1.ep6.el5.src.rpm
jbossas-domain-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
infinispan-cachestore-jdbc-5.2.6-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-remoting3-3.2.16-1.GA_redhat_1.ep6.el5.noarch.rpm
codehaus-jackson-1.9.9-4.redhat_2.ep6.el5.src.rpm
jboss-as-ee-deployment-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-ejb-client-1.0.21-1.Final_redhat_1.ep6.el5.src.rpm
jboss-jsf-api_2.1_spec-2.1.19.1-1.Final_redhat_1.ep6.el5.noarch.rpm
xmltooling-1.3.2-10.redhat_4.ep6.el5.src.rpm
codehaus-jackson-mapper-asl-1.9.9-4.redhat_2.ep6.el5.noarch.rpm
jboss-as-cli-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-mail-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
dom4j-1.6.1-19.redhat_5.ep6.el5.src.rpm
hornetq-native-2.3.1-1.Final_redhat_1.ep6.el5.src.rpm
jboss-ejb-client-1.0.21-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossas-bundles-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jbosgi-framework-core-2.1.0-2.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-deployment-repository-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-osgi-service-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
httpd-devel-2.2.22-19.ep6.el5.i386.rpm
hibernate4-4.2.0-4.Final_redhat_1.ep6.el5.noarch.rpm
jbosgi-deployment-1.3.0-2.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-console-1.5.2-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossweb-7.2.0-2.redhat_1.ep6.el5.noarch.rpm
jboss-aesh-0.33.3-1_redhat_1.ep6.el5.src.rpm
jboss-as-clustering-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-ee-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
xerces-j2-eap6-2.9.1-14_redhat_4.ep6.el5.noarch.rpm
apache-commons-pool-eap6-1.6-6.redhat_4.ep6.el5.noarch.rpm
jboss-jsf-api_2.1_spec-2.1.19.1-1.Final_redhat_1.ep6.el5.src.rpm
joda-time-1.6.2-5.redhat_4.ep6.el5.5.noarch.rpm
jboss-msc-1.0.4-1.GA_redhat_1.ep6.el5.noarch.rpm
wss4j-1.6.9-2.redhat_2.ep6.el5.noarch.rpm
apache-cxf-xjc-utils-2.6.0-1.redhat_1.ep6.el5.src.rpm
dom4j-eap6-1.6.1-19.redhat_5.ep6.el5.src.rpm
jboss-security-negotiation-2.2.5-1.Final_redhat_1.ep6.el5.noarch.rpm
jbossws-common-tools-1.1.0-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-jaxr-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-jpa-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
netty-3.6.2-1_redhat_1.1.ep6.el5.src.rpm
tomcat-native-1.1.27-4.redhat_1.ep6.el5.x86_64.rpm
apache-cxf-xjc-utils-2.6.0-1.redhat_1.ep6.el5.noarch.rpm
hibernate4-core-4.2.0-4.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-messaging-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-modules-1.2.0-2.Final_redhat_1.ep6.el5.noarch.rpm
xml-security-1.5.3-1.redhat_1.ep6.el5.noarch.rpm
jboss-dmr-1.1.6-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-controller-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-ee-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-network-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
infinispan-core-5.2.6-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-platform-mbean-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-weld-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jaxbintros-1.0.2-14.GA_redhat_4.ep6.el5.src.rpm
jboss-marshalling-1.3.16-.GA.redhat_1.ep6.el5.noarch.rpm
jboss-aesh-0.33.3-1_redhat_1.ep6.el5.noarch.rpm
jboss-as-osgi-configadmin-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
httpd-devel-2.2.22-19.ep6.el5.x86_64.rpm
jboss-as-domain-http-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-process-controller-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
glassfish-javamail-1.4.5-1.redhat_1.ep6.el5.src.rpm
weld-cdi-1.0-api-1.0-8.SP4_redhat_2.ep6.el5.noarch.rpm
jboss-as-osgi-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
codehaus-jackson-1.9.9-4.redhat_2.ep6.el5.noarch.rpm
jbossas-javadocs-7.2.0-7.Final_redhat_7.ep6.el5.src.rpm
jboss-as-jaxr-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jul-to-slf4j-stub-1.0.1-1.Final_redhat_1.1.ep6.el5.2.noarch.rpm
jboss-as-logging-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-naming-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-remoting-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossas-modules-eap-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
apache-commons-daemon-eap6-1.0.15-4.redhat_1.ep6.el5.src.rpm
atinject-eap6-1-3.redhat_3.ep6.el5.noarch.rpm
codehaus-jackson-jaxrs-1.9.9-4.redhat_2.ep6.el5.noarch.rpm
hornetq-native-2.3.1-1.Final_redhat_1.ep6.el5.i386.rpm
jboss-as-deployment-scanner-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossws-common-2.1.1-1.Final_redhat_2.ep6.el5.noarch.rpm
picketbox-4.0.17-1.Final_redhat_1.ep6.el5.noarch.rpm
mod_cluster-1.2.4-1.Final_redhat_1.ep6.el5.noarch.rpm
sun-ws-metadata-2.0-api-1.0.MR1-12_MR1_redhat_3.ep6.el5.5.noarch.rpm
jboss-as-version-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossas-standalone-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-jms-api_1.1_spec-1.0.1-6.Final_redhat_2.ep6.el5.noarch.rpm
hibernate4-entitymanager-4.2.0-4.Final_redhat_1.ep6.el5.noarch.rpm
jboss-as-server-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-metadata-common-7.0.8-1.Final_redhat_1.ep6.el5.noarch.rpm
jbosgi-spi-3.2.0-1.Final_redhat_1.ep6.el5.src.rpm
jboss-as-embedded-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
h2database-1.3.168-3_redhat_2.ep6.el5.src.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-1.redhat_1.ep6.el5.src.rpm
jboss-as-connector-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-management-client-content-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-as-xts-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jaxbintros-1.0.2-14.GA_redhat_4.ep6.el5.noarch.rpm
jbossas-hornetq-native-2.3.1-1.Final_redhat_1.ep6.el5.i386.rpm
jboss-metadata-7.0.8-1.Final_redhat_1.ep6.el5.src.rpm
hornetq-2.3.1-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-common-beans-1.1.0-1.Final_redhat_1.ep6.el5.src.rpm
jbossws-native-4.1.1-1.Final_redhat_1.ep6.el5.src.rpm
mod_jk-1.2.37-2.redhat_1.ep6.el5.src.rpm
mod_jk-ap22-1.2.37-2.redhat_1.ep6.el5.i386.rpm
jbossas-bundles-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jbossas-modules-eap-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
opensaml-2.5.1-1.redhat_1.ep6.el5.2.src.rpm
glassfish-jsf12-1.2_15-12_b01_redhat_3.ep6.el5.src.rpm
jboss-modules-1.2.0-2.Final_redhat_1.ep6.el5.src.rpm
picketbox-4.0.17-1.Final_redhat_1.ep6.el5.src.rpm
slf4j-eap6-1.7.2-10.redhat_1.ep6.el5.src.rpm
tomcat-native-1.1.27-4.redhat_1.ep6.el5.src.rpm
wsdl4j-eap6-1.6.2-12.3.redhat_4.ep6.el5.src.rpm
xml-security-1.5.3-1.redhat_1.ep6.el5.src.rpm
jbossas-hornetq-native-2.3.1-1.Final_redhat_1.ep6.el5.x86_64.rpm
ecj3-3.7.2-6.redhat_1.ep6.el5.src.rpm
apache-cxf-2.6.6-20.redhat_3.ep6.el5.src.rpm
jacorb-jboss-2.3.2-11.redhat_4.ep6.el5.src.rpm
wsdl4j-eap6-1.6.2-12.3.redhat_4.ep6.el5.noarch.rpm
weld-cdi-1.0-api-1.0-8.SP4_redhat_2.ep6.el5.src.rpm
jbossas-appclient-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-logging-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
dom4j-eap6-1.6.1-19.redhat_5.ep6.el5.noarch.rpm
dom4j-1.6.1-19.redhat_5.ep6.el5.noarch.rpm
jboss-as-osgi-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-process-controller-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
guava-13.0.1-1.redhat_1.ep6.el5.1.noarch.rpm
httpd-2.2.22-19.ep6.el5.x86_64.rpm
jcip-annotations-1.0-3.redhat_3.ep6.el5.src.rpm
slf4j-jboss-logmanager-1.0.2-1.GA_redhat_1.3.ep6.el5.2.src.rpm
ecj3-3.7.2-6.redhat_1.ep6.el5.noarch.rpm
httpd-tools-2.2.22-19.ep6.el5.i386.rpm
jboss-as-threads-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
glassfish-jaxb-2.2.5-14.redhat_5.ep6.el5.src.rpm
mod_cluster-1.2.4-1.Final_redhat_1.ep6.el5.src.rpm
jbossws-cxf-4.1.3-1.Final_redhat_3.ep6.el5.2.noarch.rpm
jboss-as-sar-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-jmx-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
httpcomponents-6-7.redhat_1.ep6.el5.src.rpm
cxf-xjc-ts-2.6.0-1.redhat_1.ep6.el5.noarch.rpm
jboss-as-remoting-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
httpd-2.2.22-19.ep6.el5.src.rpm
jboss-as-connector-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
jboss-as-security-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
picketlink-federation-2.1.6-3.Final_redhat_2.ep6.el5.src.rpm
guava-libraries-13.0.1-1.redhat_1.ep6.el5.1.src.rpm
ironjacamar-1.0.17-1.Final_redhat_1.ep6.el5.noarch.rpm
glassfish-jaxb-eap6-2.2.5-14.redhat_5.ep6.el5.noarch.rpm
jboss-as-controller-client-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm
weld-core-1.1.13-1.Final_redhat_1.ep6.el5.1.noarch.rpm
jbossas-jbossweb-native-1.1.27-4.redhat_1.ep6.el5.x86_64.rpm
atinject-eap6-1-3.redhat_3.ep6.el5.src.rpm
jboss-as-system-jmx-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
jboss-remoting3-jmx-1.1.0-1.Final_redhat_1.ep6.el5.src.rpm
jbosgi-repository-2.1.0-1.Final_redhat_1.ep6.el5.noarch.rpm
jboss-transaction-api_1.1_spec-1.0.1-6.Final_redhat_2.ep6.el5.src.rpm
jgroups-3.2.7-1.Final_redhat_1.ep6.el5.noarch.rpm
netty-3.6.2-1_redhat_1.1.ep6.el5.noarch.rpm
jboss-remote-naming-1.0.6-2.Final_redhat_2.ep6.el5.src.rpm
jboss-as-web-7.2.0-8.Final_redhat_8.ep6.el5.src.rpm
xmltooling-1.3.2-10.redhat_4.ep6.el5.noarch.rpm
jboss-as-management-client-content-7.2.0-8.Final_redhat_8.ep6.el5.noarch.rpm

Fixes

CVEs

References

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.