- Vulnerability/
- RHBA-2017:2548
RHBA-2017:2548: Update to Red Hat JBoss Middleware images to fix log4j CVE-2017-5645
First published: Wed Aug 30 2017(Updated: )
Red Hat JBoss Middleware for OpenShift provides images for many of the Red Hat Middleware products, for use with OpenShift Container Platform, with on-premise or private cloud deployments.<br>This errata updates the following images by applying a fix for CVE-2017-5645 (<a href="https://access.redhat.com/security/cve/CVE-2017-5645):" target="_blank">https://access.redhat.com/security/cve/CVE-2017-5645):</a> Red Hat JBoss Enterprise Application Platform 6.4, Red Hat JBoss Enterprise Application Platform 7.0, Red Hat JBoss Web Server 3.0, Red Hat JBoss Web Server 3.1, Red Hat JBoss Data Grid 6.5, Red Hat JBoss BPM Suite 6.3 Process Server, Red Hat JBoss BPM Suite 6.4 Process Server, Red Hat JBoss BRMS 6.3 Decision Server, Red Hat JBoss BRMS 6.4 Decision Server, and Red Hat Single Sign-On 7.0.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat JBoss Enterprise Application Platform | ||
| Red Hat JBoss Web Server | ||
| Red Hat JBoss Data Grid | ||
| Red Hat JBoss BPM Suite | ||
| Red Hat JBoss Business Rules Management System | ||
| Red Hat Single Sign On |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHBA-2017:2548?
The severity of RHBA-2017:2548 is categorized as moderate due to the vulnerabilities addressed.
How do I fix RHBA-2017:2548?
To fix RHBA-2017:2548, update the affected Red Hat JBoss Middleware images to the latest version provided in the errata.
What vulnerability does RHBA-2017:2548 address?
RHBA-2017:2548 addresses a fix for CVE-2017-5645 which impacts Red Hat JBoss Middleware components.
Which products are affected by RHBA-2017:2548?
RHBA-2017:2548 affects multiple products including Red Hat JBoss Enterprise Application Platform and Red Hat Single Sign-On.
Is upgrading necessary for RHBA-2017:2548?
Yes, upgrading is necessary to protect against vulnerabilities specified in RHBA-2017:2548.
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHBA-2017:2548
- agent/source
- agent/title
- agent/remedy
- agent/description
- agent/references
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat jboss enterprise application platform
- canonical/red hat jboss web server
- canonical/red hat jboss data grid
- canonical/red hat jboss bpm suite
- canonical/red hat jboss business rules management system
- canonical/red hat single sign on