Issued:: 2013-12-04
Updated:: 2013-12-04

RHSA-2013:1786 - Low: Red Hat JBoss Enterprise Application Platform 6.2.0 update

Synopsis

Low: Red Hat JBoss Enterprise Application Platform 6.2.0 update

Type/Severity

Security Advisory Low

Topic

Updated Red Hat JBoss Enterprise Application Platform 6.2.0 packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Description

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.

The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJNI writes them and when they are executed. (CVE-2013-2035)

A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke. (CVE-2013-2133)

The CVE-2013-2035 issue was discovered by Florian Weimer of the Red Hat Product Security Team, and the CVE-2013-2133 issue was discovered by Richard Opalka and Arun Neelicattu of Red Hat.

This release serves as a replacement for JBoss Enterprise Application Platform 6.1.1, and includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References.

All users of JBoss Enterprise Application Platform 6.1.1 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, back up any customized Red Hat JBoss Enterprise Application Platform 6 configuration files. On update, the configuration files that have been locally modified will not be updated. The updated version of such files will be stored as the rpmnew files. Make sure to locate any such files after the update and merge any changes manually.

For more details, refer to the JBoss Enterprise Application Platform 6.2.0 Release Notes, linked to in the References.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Product	Version	Arch
JBoss Enterprise Application Platform	6	x86_64
JBoss Enterprise Application Platform	6	i386
JBoss Enterprise Application Platform	6.4	x86_64
JBoss Enterprise Application Platform	6.4	i386
JBoss Enterprise Application Platform from RHUI	6	x86_64
JBoss Enterprise Application Platform from RHUI	6	i386

Updated Packages

infinispan-cachestore-remote-5.2.7-2.Final_redhat_2.1.ep6.el6.noarch.rpm
org.osgi-eap6-4.2.0-11.10.redhat_4.ep6.el6.src.rpm
xml-security-1.5.5-2.redhat_2.1.ep6.el6.src.rpm
ironjacamar-jdbc-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-webservices-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
cxf-xjc-ts-2.6.1-4.redhat_2.1.ep6.el6.noarch.rpm
jbossws-spi-2.2.2-1.Final_redhat_1.1.ep6.el6.src.rpm
sun-ws-metadata-2.0-api-1.0.MR1-16_MR1_redhat_6.1.ep6.el6.noarch.rpm
ws-commons-XmlSchema-2.0.2-8.redhat_3.1.ep6.el6.noarch.rpm
ironjacamar-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-hal-2.0.6-1.Final_redhat_1.1.ep6.el6.src.rpm
apache-commons-pool-eap6-1.6-7.redhat_6.1.ep6.el6.noarch.rpm
apache-commons-daemon-eap6-1.0.15-5.redhat_1.ep6.el6.src.rpm
hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6.i386.rpm
jboss-as-osgi-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
picketlink-federation-2.1.9-3.SP2_redhat_1.1.ep6.el6.noarch.rpm
jaxen-1.1.3-9.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-deployment-repository-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
xml-commons-resolver-eap6-1.2-16.redhat_9.1.ep6.el6.src.rpm
glassfish-jsf12-eap6-1.2_15-5.b01_redhat_8.1.ep6.el6.src.rpm
ironjacamar-deployers-common-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-transactions-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-genericjms-1.0.1-1.Final_redhat_1.1.ep6.el6.noarch.rpm
ironjacamar-common-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jbossas-appclient-7.3.0-8.Final_redhat_14.1.ep6.el6.src.rpm
jcip-annotations-eap6-1.0-5.redhat_6.1.ep6.el6.src.rpm
jboss-remoting3-jmx-1.1.2-1.Final_redhat_1.1.ep6.el6.noarch.rpm
weld-core-1.1.16-3.Final_redhat_1.1.ep6.el6.noarch.rpm
weld-cdi-1.0-api-1.0-9.SP4.redhat_3.1.ep6.el6.noarch.rpm
wsdl4j-eap6-1.6.2-14.redhat_6.1.ep6.el6.src.rpm
jboss-as-webservices-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossws-common-tools-1.2.0-2.Final_redhat_2.1.ep6.el6.src.rpm
jboss-as-deployment-scanner-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
hibernate4-infinispan-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.noarch.rpm
juddi-3.1.3-4.redhat_3.1.ep6.el6.noarch.rpm
weld-cdi-1.0-api-1.0-9.SP4.redhat_3.1.ep6.el6.src.rpm
jcip-annotations-eap6-1.0-5.redhat_6.1.ep6.el6.noarch.rpm
org.osgi.core-eap6-4.2.0-11.10.redhat_4.ep6.el6.noarch.rpm
ws-commons-neethi-3.0.2-6.redhat_3.1.ep6.el6.noarch.rpm
openws-1.4.4-2.redhat_2.1.ep6.el6.noarch.rpm
org.apache.felix.log-1.0.0-6.redhat_3.1.ep6.el6.src.rpm
jbossas-standalone-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-jaxrs-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossas-domain-7.3.0-22.Final_redhat_14.1.ep6.el6.noarch.rpm
hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6.x86_64.rpm
jboss-as-jmx-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6.x86_64.rpm
jboss-as-jsr77-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
xom-1.2.7-2.redhat_4.1.ep6.el6.src.rpm
cxf-xjc-dv-2.6.1-4.redhat_2.1.ep6.el6.noarch.rpm
xml-security-1.5.5-2.redhat_2.1.ep6.el6.noarch.rpm
jettison-1.3.1-8.redhat_3.1.ep6.el6.src.rpm
jboss-as-jmx-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-pojo-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
antlr-eap6-2.7.7-17.redhat_4.1.ep6.el6.src.rpm
jboss-as-jacorb-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-jacc-api_1.4_spec-1.0.3-1.Final_redhat_1.1.ep6.el6.src.rpm
stilts-0.1.26-10.redhat_3.1.ep6.el6.src.rpm
jbossas-product-eap-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jgroups-3.2.12-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-xts-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-osgi-service-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
mod_jk-ap22-1.2.37-4.redhat_3.ep6.el6.x86_64.rpm
jboss-as-core-security-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
xerces-j2-eap6-2.9.1-16.redhat_5.1.ep6.el6.noarch.rpm
jbossas-modules-eap-7.3.0-21.Final_redhat_14.1.ep6.el6.noarch.rpm
apache-commons-daemon-eap6-1.0.15-5.redhat_1.ep6.el6.noarch.rpm
jboss-as-logging-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-threads-2.1.1-1.Final_redhat_1.ep6.el6.src.rpm
jboss-weld-1.1-api-1.1-8.Final_redhat_4.1.ep6.el6.src.rpm
slf4j-eap6-1.7.2-11.redhat_2.1.ep6.el6.noarch.rpm
jboss-marshalling-1.4.2-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-clustering-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossas-bundles-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-cli-7.3.0-5.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-ee-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-pojo-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-jsf-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
dom4j-eap6-1.6.1-20.redhat_6.1.ep6.el6.noarch.rpm
jboss-as-jaxrs-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
xjc-utils-2.6.1-4.redhat_2.1.ep6.el6.noarch.rpm
hornetq-2.3.12-1.Final_redhat_1.1.ep6.el6.src.rpm
org.apache.felix.log-1.0.0-6.redhat_3.1.ep6.el6.noarch.rpm
velocity-eap6-1.7-4.redhat_3.1.ep6.el6.noarch.rpm
org.osgi.enterprise-eap6-4.2.0-11.10.redhat_4.ep6.el6.noarch.rpm
jbossws-cxf-4.2.3-1.Final_redhat_1.1.ep6.el6.noarch.rpm
org.apache.felix.configadmin-1.2.8-7.redhat_4.2.ep6.el6.src.rpm
ironjacamar-spec-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-appclient-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-logmanager-1.5.1-1.Final_redhat_1.ep6.el6.noarch.rpm
objectweb-asm-eap6-3.3.1-6.3.redhat_5.ep6.el6.src.rpm
jboss-as-console-2.0.6-1.Final_redhat_1.1.ep6.el6.src.rpm
apache-cxf-2.7.7-1.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-jdr-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
ws-commons-XmlSchema-2.0.2-8.redhat_3.1.ep6.el6.src.rpm
jboss-as-protocol-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-server-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
mod_jk-ap22-1.2.37-4.redhat_3.ep6.el6.i386.rpm
objectweb-asm-eap6-3.3.1-6.3.redhat_5.ep6.el6.noarch.rpm
jboss-as-connector-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-domain-http-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-marshalling-1.4.2-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-osgi-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
xmltooling-1.3.4-3.redhat_1.1.ep6.el6.noarch.rpm
antlr-eap6-2.7.7-17.redhat_4.1.ep6.el6.noarch.rpm
apache-commons-beanutils-1.8.3-13.redhat_6.1.ep6.el6.src.rpm
jboss-as-ee-deployment-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-logging-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jacorb-jboss-2.3.2-12.redhat_5.1.ep6.el6.noarch.rpm
jboss-aesh-0.33.8-1.redhat_1.1.ep6.el6.src.rpm
picketbox-4.0.19-1.SP2_redhat_1.1.ep6.el6.noarch.rpm
xml-commons-resolver-eap6-1.2-16.redhat_9.1.ep6.el6.noarch.rpm
jboss-as-domain-management-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-naming-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-host-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-protocol-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-server-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-controller-client-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-ejb3-ext-api-2.1.0-1.redhat_1.1.ep6.el6.src.rpm
jbossas-javadocs-7.3.0-14.Final_redhat_14.ep6.el6.src.rpm
jboss-as-jpa-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbosgi-metadata-2.2.0-2.Final_redhat_1.1.ep6.el6.noarch.rpm
jbossas-product-eap-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jacorb-jboss-2.3.2-12.redhat_5.1.ep6.el6.src.rpm
jboss-as-ee-deployment-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jbossws-api-1.0.2-1.Final_redhat_1.2.ep6.el6.src.rpm
jbossws-api-1.0.2-1.Final_redhat_1.2.ep6.el6.noarch.rpm
infinispan-cachestore-jdbc-5.2.7-2.Final_redhat_2.1.ep6.el6.noarch.rpm
apache-commons-cli-1.2-8.redhat_3.1.ep6.el6.src.rpm
jboss-as-embedded-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-modules-1.3.0-2.Final_redhat_2.1.ep6.el6.src.rpm
mod_jk-1.2.37-4.redhat_3.ep6.el6.src.rpm
jboss-as-appclient-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
hibernate4-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.src.rpm
jboss-as-remoting-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-hal-2.0.6-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jbossws-common-2.2.3-1.Final_redhat_1.1.ep6.el6.noarch.rpm
apache-cxf-2.7.7-1.redhat_1.1.ep6.el6.src.rpm
apache-cxf-xjc-utils-2.6.1-4.redhat_2.1.ep6.el6.src.rpm
jbossas-javadocs-7.3.0-14.Final_redhat_14.ep6.el6.noarch.rpm
mod_cluster-demo-1.2.6-2.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-clustering-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-connector-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-web-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el6.i386.rpm
mod_cluster-1.2.6-2.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6.i386.rpm
mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el6.src.rpm
jaxen-1.1.3-9.redhat_3.1.ep6.el6.src.rpm
hibernate4-entitymanager-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.noarch.rpm
jbossws-native-4.1.2-1.Final_redhat_1.1.ep6.el6.src.rpm
sun-ws-metadata-2.0-api-1.0.MR1-16_MR1_redhat_6.1.ep6.el6.src.rpm
ws-commons-neethi-3.0.2-6.redhat_3.1.ep6.el6.src.rpm
jboss-security-negotiation-2.2.6-2.Final_redhat_1.2.ep6.el6.src.rpm
xmltooling-1.3.4-3.redhat_1.1.ep6.el6.src.rpm
jboss-as-osgi-service-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-domain-http-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
httpserver-1.0.1-4.Final_redhat_3.1.ep6.el6.noarch.rpm
jboss-jacc-api_1.4_spec-1.0.3-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-system-jmx-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
ws-scout-1.2.6-4.redhat_3.1.ep6.el6.src.rpm
jbossws-cxf-4.2.3-1.Final_redhat_1.1.ep6.el6.src.rpm
mod_cluster-native-1.2.6-1.Final.redhat_1.ep6.el6.x86_64.rpm
jdom-eap6-1.1.2-5.redhat_3.1.ep6.el6.noarch.rpm
jboss-vfs2-3.2.2-1.Final_redhat_1.1.ep6.el6.noarch.rpm
dom4j-eap6-1.6.1-20.redhat_6.1.ep6.el6.src.rpm
jboss-security-negotiation-2.2.6-2.Final_redhat_1.2.ep6.el6.noarch.rpm
xom-1.2.7-2.redhat_4.1.ep6.el6.noarch.rpm
jboss-as-cmp-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-version-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-deployment-repository-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-cmp-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
juddi-3.1.3-4.redhat_3.1.ep6.el6.src.rpm
javassist-eap6-3.18.1-1.GA_redhat_1.1.ep6.el6.noarch.rpm
apache-commons-pool-eap6-1.6-7.redhat_6.1.ep6.el6.src.rpm
gnu-getopt-1.0.13-3.redhat_4.1.ep6.el6.src.rpm
javassist-eap6-3.18.1-1.GA_redhat_1.1.ep6.el6.src.rpm
jboss-remoting3-3.2.18-1.GA_redhat_1.1.ep6.el6.src.rpm
jboss-as-system-jmx-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-modcluster-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-weld-1.1-api-1.1-8.Final_redhat_4.1.ep6.el6.noarch.rpm
jboss-as-ejb3-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossas-standalone-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
wsdl4j-eap6-1.6.2-14.redhat_6.1.ep6.el6.noarch.rpm
ironjacamar-core-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-domain-management-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-naming-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jbossws-native-4.1.2-1.Final_redhat_1.1.ep6.el6.noarch.rpm
gnu-getopt-1.0.13-3.redhat_4.1.ep6.el6.noarch.rpm
hibernate4-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.noarch.rpm
jboss-as-jdr-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-security-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-embedded-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-logmanager-1.5.1-1.Final_redhat_1.ep6.el6.src.rpm
picketbox-4.0.19-1.SP2_redhat_1.1.ep6.el6.src.rpm
jboss-as-mail-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-modcluster-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-messaging-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
ironjacamar-common-impl-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
glassfish-jsf12-eap6-1.2_15-5.b01_redhat_8.1.ep6.el6.noarch.rpm
jboss-as-osgi-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-weld-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-threads-2.1.1-1.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-management-client-content-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-ejb3-ext-api-2.1.0-1.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-client-all-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
jbossws-common-2.2.3-1.Final_redhat_1.1.ep6.el6.src.rpm
mod_cluster-1.2.6-2.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
glassfish-jsf-eap6-2.1.19-2.3.redhat_2.ep6.el6.src.rpm
infinispan-core-5.2.7-2.Final_redhat_2.1.ep6.el6.noarch.rpm
jboss-as-jsf-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossws-common-tools-1.2.0-2.Final_redhat_2.1.ep6.el6.noarch.rpm
infinispan-5.2.7-2.Final_redhat_2.1.ep6.el6.noarch.rpm
jboss-as-osgi-configadmin-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
shrinkwrap-impl-base-1.1.2-3.redhat_1.1.ep6.el6.noarch.rpm
jbossws-spi-2.2.2-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-vfs2-3.2.2-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-modules-eap-7.3.0-21.Final_redhat_14.1.ep6.el6.src.rpm
wss4j-1.6.12-1.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-ejb3-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jbosgi-metadata-2.2.0-2.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-core-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-network-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
apache-commons-cli-1.2-8.redhat_3.1.ep6.el6.noarch.rpm
hornetq-2.3.12-1.Final_redhat_1.1.ep6.el6.noarch.rpm
apache-commons-configuration-1.6-8.redhat_3.1.ep6.el6.noarch.rpm
hibernate4-envers-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.noarch.rpm
jboss-as-jacorb-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-threads-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
velocity-eap6-1.7-4.redhat_3.1.ep6.el6.src.rpm
jboss-ejb-client-1.0.24-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-dmr-1.2.0-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-genericjms-1.0.1-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-weld-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
atinject-eap6-1-5.redhat_4.1.ep6.el6.noarch.rpm
ironjacamar-common-spi-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-platform-mbean-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-xts-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
org.apache.felix.configadmin-1.2.8-7.redhat_4.2.ep6.el6.noarch.rpm
jboss-as-management-client-content-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
weld-core-1.1.16-3.Final_redhat_1.1.ep6.el6.src.rpm
infinispan-client-hotrod-5.2.7-2.Final_redhat_2.1.ep6.el6.noarch.rpm
jboss-remoting3-3.2.18-1.GA_redhat_1.1.ep6.el6.noarch.rpm
slf4j-eap6-1.7.2-11.redhat_2.1.ep6.el6.src.rpm
xerces-j2-eap6-2.9.1-16.redhat_5.1.ep6.el6.src.rpm
jansi-1.9-5.redhat_3.1.ep6.el6.noarch.rpm
shrinkwrap-api-1.1.2-3.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-mail-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-modules-1.3.0-2.Final_redhat_2.1.ep6.el6.noarch.rpm
jbossas-core-7.3.0-7.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-core-security-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
openws-1.4.4-2.redhat_2.1.ep6.el6.src.rpm
jboss-as-security-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
opensaml-2.5.3-3.redhat_2.1.ep6.el6.src.rpm
shrinkwrap-spi-1.1.2-3.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-jaxr-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
apache-mime4j-0.6-8.redhat_3.1.ep6.el6.src.rpm
jbossas-bundles-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
apache-commons-beanutils-1.8.3-13.redhat_6.1.ep6.el6.noarch.rpm
jbossts-4.17.15-4.Final_redhat_4.1.ep6.el6.src.rpm
jbossas-welcome-content-eap-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-jpa-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-remoting3-jmx-1.1.2-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-welcome-content-eap-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-dmr-1.2.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
shrinkwrap-1.1.2-3.redhat_1.1.ep6.el6.src.rpm
httpserver-1.0.1-4.Final_redhat_3.1.ep6.el6.src.rpm
jboss-as-controller-client-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
ironjacamar-core-api-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-ejb-client-1.0.24-1.Final_redhat_1.1.ep6.el6.noarch.rpm
ws-scout-1.2.6-4.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-transactions-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jbossas-appclient-7.3.0-8.Final_redhat_14.1.ep6.el6.noarch.rpm
jgroups-3.2.12-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-process-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-web-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-client-all-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
glassfish-jsf-eap6-2.1.19-2.3.redhat_2.ep6.el6.noarch.rpm
ironjacamar-validator-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.noarch.rpm
jboss-as-process-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-sar-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
infinispan-5.2.7-2.Final_redhat_2.1.ep6.el6.src.rpm
jboss-as-jsr77-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
glassfish-jaxb-eap6-2.2.5-17.redhat_7.2.ep6.el6.src.rpm
hornetq-native-2.3.8-1.Final_redhat_1.ep6.el6.src.rpm
resteasy-2.3.7-2.Final_redhat_2.ep6.el6.noarch.rpm
ironjacamar-eap6-1.0.23-1.3.Final_redhat_1.ep6.el6.src.rpm
jansi-1.9-5.redhat_3.1.ep6.el6.src.rpm
jettison-1.3.1-8.redhat_3.1.ep6.el6.noarch.rpm
apache-cxf-xjc-utils-2.6.1-4.redhat_2.1.ep6.el6.noarch.rpm
apache-commons-configuration-1.6-8.redhat_3.1.ep6.el6.src.rpm
stilts-0.1.26-10.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-ee-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-host-controller-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
scannotation-1.0.3-2.redhat_4.ep6.el6.noarch.rpm
jboss-as-network-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-messaging-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-remoting-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
shrinkwrap-parent-1.1.2-3.redhat_1.1.ep6.el6.noarch.rpm
wss4j-1.6.12-1.redhat_1.1.ep6.el6.src.rpm
glassfish-jaxb-eap6-2.2.5-17.redhat_7.2.ep6.el6.noarch.rpm
jbossts-4.17.15-4.Final_redhat_4.1.ep6.el6.noarch.rpm
jboss-as-deployment-scanner-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
picketlink-federation-2.1.9-3.SP2_redhat_1.1.ep6.el6.src.rpm
jboss-as-jaxr-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
atinject-eap6-1-5.redhat_4.1.ep6.el6.src.rpm
jboss-security-xacml-2.0.8-10.Final_redhat_5.2.ep6.el6.src.rpm
jdom-eap6-1.1.2-5.redhat_3.1.ep6.el6.src.rpm
jboss-as-sar-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
jbossas-domain-7.3.0-22.Final_redhat_14.1.ep6.el6.src.rpm
jboss-as-cli-7.3.0-5.Final_redhat_14.1.ep6.el6.noarch.rpm
jboss-as-version-7.3.0-7.Final_redhat_14.1.ep6.el6.src.rpm
scannotation-1.0.3-2.redhat_4.ep6.el6.src.rpm
hibernate4-core-eap6-4.2.7-3.3.SP1_redhat_3.ep6.el6.noarch.rpm
jboss-security-xacml-2.0.8-10.Final_redhat_5.2.ep6.el6.noarch.rpm
cxf-xjc-boolean-2.6.1-4.redhat_2.1.ep6.el6.noarch.rpm
jboss-as-platform-mbean-7.3.0-6.Final_redhat_14.1.ep6.el6.src.rpm
opensaml-2.5.3-3.redhat_2.1.ep6.el6.noarch.rpm
resteasy-2.3.7-2.Final_redhat_2.ep6.el6.src.rpm
jboss-as-threads-7.3.0-6.Final_redhat_14.1.ep6.el6.noarch.rpm
apache-mime4j-0.6-8.redhat_3.1.ep6.el6.noarch.rpm
jboss-aesh-0.33.8-1.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-console-2.0.6-1.Final_redhat_1.1.ep6.el6.noarch.rpm

Fixes

CVEs

References

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.