Issued:: 2014-08-06
Updated:: 2014-08-06

RHSA-2014:1020 - Important: Red Hat JBoss Enterprise Application Platform 6.3.0 update

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 6.3.0 update

Type/Severity

Security Advisory Important

Topic

Updated Red Hat JBoss Enterprise Application Platform 6.3.0 packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Description

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.

A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the "apache" user. (CVE-2014-0226)

A denial of service flaw was found in the way httpd's mod_deflate module handled request body decompression (configured via the "DEFLATE" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system. (CVE-2014-0118)

A denial of service flaw was found in the way httpd's mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely. (CVE-2014-0231)

A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service. (CVE-2014-0193)

It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles. (CVE-2014-3472)

Red Hat would like to thank James Roper of Typesafe for reporting CVE-2014-0193, and CA Technologies for reporting CVE-2014-3472.

This release of JBoss Enterprise Application Platform also includes bug fixes and enhancements. Documentation for these changes will be available shortly from the JBoss Enterprise Application Platform 6.3.0 Release Notes, linked to in the References.

All users who require JBoss Enterprise Application Platform 6.3.0 on Red Hat Enterprise Linux 6 should install these new packages. The JBoss server process must be restarted for the update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

Affected Products

Product	Version	Arch
JBoss Enterprise Application Platform	6	x86_64
JBoss Enterprise Application Platform	6	ppc64
JBoss Enterprise Application Platform	6	i386
JBoss Enterprise Application Platform	6.4	x86_64
JBoss Enterprise Application Platform	6.4	ppc64
JBoss Enterprise Application Platform	6.4	i386
JBoss Enterprise Application Platform from RHUI	6	x86_64
JBoss Enterprise Application Platform from RHUI	6	i386

Updated Packages

jbossas-product-eap-7.4.0-19.Final_redhat_19.1.ep6.el6.noarch.rpm
hibernate4-entitymanager-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.noarch.rpm
jboss-hal-2.2.8-1.Final_redhat_1.1.ep6.el6.noarch.rpm
guava-libraries-13.0.1-3.redhat_1.1.ep6.el6.noarch.rpm
xom-1.2.7-3.redhat_4.1.ep6.el6.noarch.rpm
weld-core-1.1.23-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-sasl-1.0.4-2.Final_redhat_1.1.ep6.el6.noarch.rpm
codehaus-jackson-core-asl-1.9.9-7.redhat_3.ep6.el6.noarch.rpm
mod_snmp-2.4.1-8.GA.ep6.el6.src.rpm
jboss-as-process-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
mod_ssl-2.2.26-35.ep6.el6.x86_64.rpm
jboss-as-osgi-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
snakeyaml-eap6-1.8-1.redhat_2.2.ep6.el6.src.rpm
httpd-tools-2.2.26-35.ep6.el6.x86_64.rpm
hibernate4-validator-4.3.1-2.Final_redhat_1.1.ep6.el6.noarch.rpm
gnu-getopt-eap6-1.0.13-1.redhat_4.1.ep6.el6.noarch.rpm
ironjacamar-validator-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
mod_jk-1.2.40-2.redhat_1.ep6.el6.src.rpm
hibernate4-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.noarch.rpm
slf4j-eap6-1.7.2-13.redhat_3.1.ep6.el6.src.rpm
infinispan-cachestore-remote-5.2.10-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-deployment-scanner-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
opensaml-2.5.3-4.redhat_2.1.ep6.el6.src.rpm
mod_jk-ap22-1.2.40-2.redhat_1.ep6.el6.ppc64.rpm
jboss-metadata-ejb-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
sun-txw2-20110809-7.redhat_4.1.ep6.el6.noarch.rpm
jboss-as-security-7.4.0-14.Final_redhat_19.1.ep6.el6.src.rpm
apache-commons-codec-eap6-1.4-16.redhat_3.1.ep6.el6.noarch.rpm
jbossws-cxf-4.3.0-3.Final_redhat_3.1.ep6.el6.noarch.rpm
jboss-logging-3.1.4-1.GA_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-deployment-repository-7.4.0-14.Final_redhat_19.1.ep6.el6.src.rpm
picketlink-federation-2.5.3-9.SP10_redhat_1.1.ep6.el6.noarch.rpm
jbossas-modules-eap-7.4.0-38.Final_redhat_19.1.ep6.el6.noarch.rpm
jbossas-core-7.4.0-16.Final_redhat_19.1.ep6.el6.src.rpm
mod_cluster-1.2.9-1.Final_redhat_1.1.ep6.el6.src.rpm
openws-1.4.4-3.redhat_2.1.ep6.el6.src.rpm
infinispan-5.2.10-1.Final_redhat_1.1.ep6.el6.noarch.rpm
snakeyaml-eap6-1.8-1.redhat_2.2.ep6.el6.noarch.rpm
jboss-as-deployment-scanner-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
rngom-eap6-201103-2.redhat_3.1.ep6.el6.src.rpm
mod_snmp-2.4.1-8.GA.ep6.el6.x86_64.rpm
jbossweb-7.4.8-4.Final_redhat_4.1.ep6.el6.noarch.rpm
woodstox-stax2-api-eap6-3.1.3-3.redhat_1.1.ep6.el6.noarch.rpm
jboss-as-ee-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossas-bundles-7.4.0-15.Final_redhat_19.1.ep6.el6.src.rpm
joda-time-eap6-1.6.2-1.redhat_4.1.ep6.el6.src.rpm
jdom-eap6-1.1.2-6.redhat_4.1.ep6.el6.noarch.rpm
h2database-1.3.168-7.redhat_4.1.ep6.el6.src.rpm
jboss-as-sar-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jython-eap6-2.5.2-6.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-console-2.2.8-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-embedded-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-remoting-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-ejb3-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-osgi-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-platform-mbean-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossweb-7.4.8-4.Final_redhat_4.1.ep6.el6.src.rpm
jboss-as-domain-management-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-modcluster-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-web-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.i386.rpm
ws-commons-neethi-3.0.2-8.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-xts-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-picketlink-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
sun-codemodel-2.6-4.redhat_2.2.ep6.el6.noarch.rpm
mod_cluster-native-1.2.9-3.Final_redhat_2.ep6.el6.src.rpm
ecj-eap6-4.3.1-3.redhat_1.1.ep6.el6.noarch.rpm
mod_cluster-1.2.9-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-network-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
apache-mime4j-0.6-10.redhat_3.1.ep6.el6.src.rpm
jboss-as-logging-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-mail-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-configadmin-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-clustering-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-host-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
wsdl4j-eap6-1.6.3-1.redhat_1.1.ep6.el6.src.rpm
jboss-as-network-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-saaj-api_1.3_spec-1.0.3-3.Final_redhat_1.1.ep6.el6.noarch.rpm
picketlink-bindings-2.5.3-8.SP10_redhat_1.1.ep6.el6.src.rpm
jboss-as-ee-deployment-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-core-security-7.4.0-15.Final_redhat_19.1.ep6.el6.src.rpm
mod_jk-ap22-1.2.40-2.redhat_1.ep6.el6.i386.rpm
wsdl4j-eap6-1.6.3-1.redhat_1.1.ep6.el6.noarch.rpm
httpcomponents-client-eap6-4.2.1-10.redhat_1.3.ep6.el6.noarch.rpm
ws-commons-neethi-3.0.2-8.redhat_3.1.ep6.el6.src.rpm
jboss-as-domain-management-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossas-domain-7.4.0-15.Final_redhat_19.1.ep6.el6.noarch.rpm
scannotation-1.0.3-6.redhat_4.2.ep6.el6.noarch.rpm
jboss-as-security-7.4.0-14.Final_redhat_19.1.ep6.el6.noarch.rpm
hibernate4-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.src.rpm
jandex-eap6-1.0.3-3.Final_redhat_2.2.ep6.el6.src.rpm
jbossas-appclient-7.4.0-15.Final_redhat_19.1.ep6.el6.src.rpm
picketlink-federation-2.5.3-9.SP10_redhat_1.1.ep6.el6.src.rpm
jbossas-standalone-7.4.0-15.Final_redhat_19.1.ep6.el6.noarch.rpm
httpd-2.2.26-35.ep6.el6.i386.rpm
jettison-eap6-1.3.1-3.redhat_4.1.ep6.el6.noarch.rpm
sun-codemodel-2.6-4.redhat_2.2.ep6.el6.src.rpm
jboss-remoting3-3.3.1-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-process-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-metadata-common-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-jaxr-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
apache-commons-configuration-eap6-1.6-1.redhat_3.1.ep6.el6.src.rpm
codehaus-jackson-mapper-asl-1.9.9-7.redhat_3.ep6.el6.noarch.rpm
ironjacamar-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-cmp-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
guava-libraries-13.0.1-3.redhat_1.1.ep6.el6.src.rpm
jansi-eap6-1.9-2.redhat_4.3.ep6.el6.src.rpm
jboss-as-mail-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
sun-saaj-1.3-impl-1.3.16-9.redhat_3.1.ep6.el6.src.rpm
mod_cluster-native-1.2.9-3.Final_redhat_2.ep6.el6.i386.rpm
httpd-manual-2.2.26-35.ep6.el6.ppc64.rpm
resteasy-2.3.8-4.Final_redhat_3.1.ep6.el6.src.rpm
jboss-as-connector-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
apache-mime4j-0.6-10.redhat_3.1.ep6.el6.noarch.rpm
mod_cluster-native-1.2.9-3.Final_redhat_2.ep6.el6.ppc64.rpm
jboss-as-jaxr-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-system-jmx-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-vfs2-3.2.5-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-osgi-configadmin-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossas-modules-eap-7.4.0-38.Final_redhat_19.1.ep6.el6.src.rpm
jboss-security-negotiation-2.3.3-1.Final_redhat_1.1.ep6.el6.noarch.rpm
infinispan-core-5.2.10-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-transactions-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
hornetq-2.3.20-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-weld-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-controller-client-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
mod_snmp-2.4.1-8.GA.ep6.el6.i386.rpm
apache-commons-lang-eap6-2.6-8.redhat_3.1.ep6.el6.src.rpm
httpcomponents-eap6-6-10.redhat_1.3.ep6.el6.src.rpm
ironjacamar-common-spi-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-jpa-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-configadmin-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
codehaus-jackson-1.9.9-7.redhat_3.ep6.el6.noarch.rpm
hibernate4-envers-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.noarch.rpm
ironjacamar-core-impl-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jaxbintros-1.0.2-17.GA_redhat_6.1.ep6.el6.noarch.rpm
jboss-as-jmx-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-jsr77-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-osgi-service-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-metadata-7.1.0-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-modcluster-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
httpd-tools-2.2.26-35.ep6.el6.i386.rpm
ironjacamar-common-api-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jbossas-appclient-7.4.0-15.Final_redhat_19.1.ep6.el6.noarch.rpm
jbossas-hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.ppc64.rpm
ironjacamar-core-api-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-remoting3-3.3.1-1.Final_redhat_1.1.ep6.el6.noarch.rpm
hibernate4-infinispan-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.noarch.rpm
codehaus-jackson-1.9.9-7.redhat_3.ep6.el6.src.rpm
infinispan-5.2.10-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-jsf-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-controller-client-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-protocol-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
apache-commons-collections-eap6-3.2.1-15.redhat_3.1.ep6.el6.src.rpm
apache-commons-io-eap6-2.1-8.redhat_3.1.ep6.el6.noarch.rpm
sun-xsom-20110809-7.redhat_3.1.ep6.el6.src.rpm
jboss-as-embedded-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-sar-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
sun-istack-commons-2.6.1-10.redhat_2.2.ep6.el6.src.rpm
mod_ssl-2.2.26-35.ep6.el6.i386.rpm
jboss-marshalling-1.4.6-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-connector-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-xts-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
xmltooling-1.3.4-6.redhat_3.1.ep6.el6.noarch.rpm
jbossas-jbossweb-native-1.1.30-2.redhat_1.ep6.el6.ppc64.rpm
jboss-as-jacorb-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossws-native-4.2.0-1.Final_redhat_1.1.ep6.el6.src.rpm
mod_rt-2.4.1-5.GA.ep6.el6.src.rpm
jboss-as-host-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
tomcat-native-1.1.30-2.redhat_1.ep6.el6.src.rpm
jboss-jstl-api_1.2_spec-1.0.6-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-pojo-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-naming-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
cal10n-eap6-0.7.3-2.redhat_4.1.ep6.el6.src.rpm
jboss-jaxws-api_2.2_spec-2.0.2-4.Final_redhat_1.1.ep6.el6.noarch.rpm
gnu-getopt-eap6-1.0.13-1.redhat_4.1.ep6.el6.src.rpm
jbossws-native-4.2.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
picketlink-bindings-2.5.3-8.SP10_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-ee-deployment-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
hibernate4-core-eap6-4.2.14-2.SP1_redhat_1.1.ep6.el6.noarch.rpm
glassfish-jaf-1.1.1-16.redhat_2.ep6.el6.src.rpm
jboss-as-messaging-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
xmltooling-1.3.4-6.redhat_3.1.ep6.el6.src.rpm
mod_cluster-native-1.2.9-3.Final_redhat_2.ep6.el6.x86_64.rpm
ironjacamar-spec-api-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-jstl-api_1.2_spec-1.0.6-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jansi-eap6-1.9-2.redhat_4.3.ep6.el6.noarch.rpm
hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.ppc64.rpm
jboss-as-jaxrs-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-security-negotiation-2.3.3-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossts-4.17.21-2.Final_redhat_2.1.ep6.el6.src.rpm
netty-3.6.9-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-cli-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
apache-commons-cli-eap6-1.2-6.redhat_4.1.ep6.el6.src.rpm
cal10n-eap6-0.7.3-2.redhat_4.1.ep6.el6.noarch.rpm
jboss-saaj-api_1.3_spec-1.0.3-3.Final_redhat_1.1.ep6.el6.src.rpm
mod_rt-2.4.1-5.GA.ep6.el6.i386.rpm
jbossas-core-7.4.0-16.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-web-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
ironjacamar-jdbc-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
httpcomponents-core-eap6-4.2.1-10.redhat_1.3.ep6.el6.noarch.rpm
jboss-as-server-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
glassfish-jaf-1.1.1-16.redhat_2.ep6.el6.noarch.rpm
h2database-1.3.168-7.redhat_4.1.ep6.el6.noarch.rpm
jboss-as-jpa-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-jdr-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-core-security-7.4.0-15.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-vfs2-3.2.5-1.Final_redhat_1.1.ep6.el6.src.rpm
xml-commons-resolver-eap6-1.2-17.redhat_9.1.ep6.el6.noarch.rpm
jboss-as-threads-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
httpd-tools-2.2.26-35.ep6.el6.ppc64.rpm
netty-3.6.9-1.Final_redhat_1.1.ep6.el6.noarch.rpm
httpd-2.2.26-35.ep6.el6.x86_64.rpm
jboss-metadata-appclient-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
httpd-devel-2.2.26-35.ep6.el6.i386.rpm
jboss-metadata-web-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
mod_ssl-2.2.26-35.ep6.el6.ppc64.rpm
jettison-eap6-1.3.1-3.redhat_4.1.ep6.el6.src.rpm
rngom-eap6-201103-2.redhat_3.1.ep6.el6.noarch.rpm
jboss-transaction-spi-7.1.0-2.Final_redhat_1.1.ep6.el6.noarch.rpm
httpcomponents-project-eap6-6-10.redhat_1.3.ep6.el6.noarch.rpm
xml-commons-resolver-eap6-1.2-17.redhat_9.1.ep6.el6.src.rpm
sun-xsom-20110809-7.redhat_3.1.ep6.el6.noarch.rpm
jboss-as-domain-http-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-pojo-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jdom-eap6-1.1.2-6.redhat_4.1.ep6.el6.src.rpm
jboss-as-threads-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
httpcore-eap6-4.2.1-10.redhat_1.3.ep6.el6.noarch.rpm
httpclient-eap6-4.2.1-10.redhat_1.3.ep6.el6.noarch.rpm
jboss-as-jsf-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossas-javadocs-7.4.0-20.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-osgi-configadmin-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-jdr-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-picketlink-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-sasl-1.0.4-2.Final_redhat_1.1.ep6.el6.src.rpm
resteasy-2.3.8-4.Final_redhat_3.1.ep6.el6.noarch.rpm
jgroups-3.2.13-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossws-spi-2.3.0-2.Final_redhat_1.1.ep6.el6.noarch.rpm
tomcat-native-1.1.30-2.redhat_1.ep6.el6.i386.rpm
jgroups-3.2.13-1.Final_redhat_1.1.ep6.el6.noarch.rpm
slf4j-eap6-1.7.2-13.redhat_3.1.ep6.el6.noarch.rpm
sun-istack-commons-2.6.1-10.redhat_2.2.ep6.el6.noarch.rpm
jbossws-common-2.3.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-client-all-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
stilts-0.1.26-13.redhat_4.2.ep6.el6.src.rpm
apache-commons-beanutils-eap6-1.8.3-7.redhat_6.1.ep6.el6.noarch.rpm
mod_jk-ap22-1.2.40-2.redhat_1.ep6.el6.x86_64.rpm
httpd-manual-2.2.26-35.ep6.el6.i386.rpm
jbossas-jbossweb-native-1.1.30-2.redhat_1.ep6.el6.x86_64.rpm
jboss-as-osgi-service-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jython-eap6-2.5.2-6.redhat_3.1.ep6.el6.src.rpm
httpd-devel-2.2.26-35.ep6.el6.x86_64.rpm
jbossas-hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.x86_64.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-6.redhat_2.ep6.el6.x86_64.rpm
hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.src.rpm
jboss-transaction-api_1.1_spec-1.0.1-10.Final_redhat_2.2.ep6.el6.src.rpm
jboss-as-domain-http-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
opensaml-2.5.3-4.redhat_2.1.ep6.el6.noarch.rpm
codehaus-jackson-jaxrs-1.9.9-7.redhat_3.ep6.el6.noarch.rpm
mod_cluster-demo-1.2.9-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-logging-3.1.4-1.GA_redhat_1.1.ep6.el6.src.rpm
jboss-as-console-2.2.8-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-appclient-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
ironjacamar-deployers-common-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
apache-commons-collections-eap6-3.2.1-15.redhat_3.1.ep6.el6.noarch.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-6.redhat_2.ep6.el6.src.rpm
hibernate4-validator-4.3.1-2.Final_redhat_1.1.ep6.el6.src.rpm
httpd-2.2.26-35.ep6.el6.src.rpm
jbossws-common-2.3.0-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossws-cxf-4.3.0-3.Final_redhat_3.1.ep6.el6.src.rpm
tomcat-native-1.1.30-2.redhat_1.ep6.el6.x86_64.rpm
jaxen-eap6-1.1.3-2.redhat_4.1.ep6.el6.src.rpm
sun-saaj-1.3-impl-1.3.16-9.redhat_3.1.ep6.el6.noarch.rpm
apache-commons-lang-eap6-2.6-8.redhat_3.1.ep6.el6.noarch.rpm
jbossas-welcome-content-eap-7.4.0-17.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-management-client-content-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-system-jmx-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jbossas-bundles-7.4.0-15.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-server-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
openws-1.4.4-3.redhat_2.1.ep6.el6.noarch.rpm
jbossts-4.17.21-2.Final_redhat_2.1.ep6.el6.noarch.rpm
jboss-metadata-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
woodstox-core-eap6-4.2.0-12.redhat_4.1.ep6.el6.noarch.rpm
glassfish-jaxb-eap6-2.2.5-20.redhat_8.1.ep6.el6.src.rpm
apache-commons-beanutils-eap6-1.8.3-7.redhat_6.1.ep6.el6.src.rpm
jboss-as-ee-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-msc-1.1.5-1.Final_redhat_1.1.ep6.el6.noarch.rpm
httpd-devel-2.2.26-35.ep6.el6.ppc64.rpm
woodstox-stax2-api-eap6-3.1.3-3.redhat_1.1.ep6.el6.src.rpm
jboss-as-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
sun-txw2-20110809-7.redhat_4.1.ep6.el6.src.rpm
hornetq-2.3.20-1.Final_redhat_1.1.ep6.el6.src.rpm
joda-time-eap6-1.6.2-1.redhat_4.1.ep6.el6.noarch.rpm
ironjacamar-common-impl-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
ecj-eap6-4.3.1-3.redhat_1.1.ep6.el6.src.rpm
jboss-as-webservices-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
scannotation-1.0.3-6.redhat_4.2.ep6.el6.src.rpm
jboss-transaction-api_1.1_spec-1.0.1-10.Final_redhat_2.2.ep6.el6.noarch.rpm
woodstox-core-eap6-4.2.0-12.redhat_4.1.ep6.el6.src.rpm
jboss-as-appclient-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-cli-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
httpd-2.2.26-35.ep6.el6.ppc64.rpm
jaxbintros-1.0.2-17.GA_redhat_6.1.ep6.el6.src.rpm
jboss-as-platform-mbean-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-deployment-repository-7.4.0-14.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-client-all-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jbossas-javadocs-7.4.0-20.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-controller-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-clustering-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-msc-1.1.5-1.Final_redhat_1.1.ep6.el6.src.rpm
apache-commons-configuration-eap6-1.6-1.redhat_3.1.ep6.el6.noarch.rpm
apache-commons-cli-eap6-1.2-6.redhat_4.1.ep6.el6.noarch.rpm
slf4j-jboss-logmanager-1.0.3-1.GA_redhat_1.1.ep6.el6.src.rpm
xom-1.2.7-3.redhat_4.1.ep6.el6.src.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-6.redhat_2.ep6.el6.i386.rpm
jboss-as-weld-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
infinispan-client-hotrod-5.2.10-1.Final_redhat_1.1.ep6.el6.noarch.rpm
codehaus-jackson-xc-1.9.9-7.redhat_3.ep6.el6.noarch.rpm
jboss-as-messaging-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jbossas-welcome-content-eap-7.4.0-17.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-jms-api_1.1_spec-1.0.1-8.Final_redhat_2.2.ep6.el6.noarch.rpm
jboss-as-jsr77-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-jacorb-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
glassfish-jaxb-eap6-2.2.5-20.redhat_8.1.ep6.el6.noarch.rpm
jboss-transaction-spi-7.1.0-2.Final_redhat_1.1.ep6.el6.src.rpm
jboss-jms-api_1.1_spec-1.0.1-8.Final_redhat_2.2.ep6.el6.src.rpm
hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.x86_64.rpm
jboss-as-naming-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-version-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
mod_rt-2.4.1-5.GA.ep6.el6.x86_64.rpm
jbossas-product-eap-7.4.0-19.Final_redhat_19.1.ep6.el6.src.rpm
apache-commons-daemon-jsvc-eap6-1.0.15-6.redhat_2.ep6.el6.ppc64.rpm
tomcat-native-1.1.30-2.redhat_1.ep6.el6.ppc64.rpm
jboss-as-cmp-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
stilts-0.1.26-13.redhat_4.2.ep6.el6.noarch.rpm
jaxen-eap6-1.1.3-2.redhat_4.1.ep6.el6.noarch.rpm
jboss-as-transactions-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-ejb3-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-management-client-content-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-jaxrs-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-hal-2.2.8-1.Final_redhat_1.1.ep6.el6.src.rpm
jboss-genericjms-1.0.5-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-jaxws-api_2.2_spec-2.0.2-4.Final_redhat_1.1.ep6.el6.src.rpm
jboss-as-version-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
ironjacamar-eap6-1.0.26-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-logging-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
jbossas-hornetq-native-2.3.20-2.Final_redhat_1.ep6.el6.i386.rpm
jboss-genericjms-1.0.5-1.Final_redhat_1.1.ep6.el6.src.rpm
slf4j-jboss-logmanager-1.0.3-1.GA_redhat_1.1.ep6.el6.noarch.rpm
jbossas-standalone-7.4.0-15.Final_redhat_19.1.ep6.el6.src.rpm
httpd-manual-2.2.26-35.ep6.el6.x86_64.rpm
apache-commons-codec-eap6-1.4-16.redhat_3.1.ep6.el6.src.rpm
jbossws-spi-2.3.0-2.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-domain-7.4.0-15.Final_redhat_19.1.ep6.el6.src.rpm
jboss-as-jmx-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
httpmime-eap6-4.2.1-10.redhat_1.3.ep6.el6.noarch.rpm
jandex-eap6-1.0.3-3.Final_redhat_2.2.ep6.el6.noarch.rpm
jboss-marshalling-1.4.6-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-as-remoting-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
weld-core-1.1.23-1.Final_redhat_1.1.ep6.el6.src.rpm
jbossas-jbossweb-native-1.1.30-2.redhat_1.ep6.el6.i386.rpm
jboss-as-protocol-7.4.0-13.Final_redhat_19.1.ep6.el6.noarch.rpm
jboss-as-webservices-7.4.0-13.Final_redhat_19.1.ep6.el6.src.rpm
infinispan-cachestore-jdbc-5.2.10-1.Final_redhat_1.1.ep6.el6.noarch.rpm
jboss-metadata-ear-7.1.0-1.Final_redhat_1.1.ep6.el6.noarch.rpm
apache-commons-io-eap6-2.1-8.redhat_3.1.ep6.el6.src.rpm

Fixes

CVEs

References

Additional information

The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.