RHSA-2017:0831: Important: JBoss Enterprise Application Platform 7.0.5 on RHEL 6
Published Mar 22, 2017
·Updated
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.This release of Red Hat JBoss Enterprise Application Platform 7.0.5 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.0.4, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.Security Fix(es): It was discovered that the jboss init script performed unsafe file handling which could result in local privilege escalation. (CVE-2016-8656) It was found that JBoss EAP 7 Header Cache was inefficient. An attacker could use this flaw to cause a denial of service attack. (CVE-2016-9589) Red Hat would like to thank Gabriel Lavoie (Halogen Software) for reporting CVE-2016-9589.
Affected Software
95 affected componentsFixes available
redhat/eap7-activemq-artemis<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-artemis-native<1.1.0-12.redhat_4.ep7.el6
1.1.0-12.redhat_4.ep7.el6
redhat/eap7-hibernate<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-jboss-msc<1.2.7-1.SP1_redhat_1.1.ep7.el6
1.2.7-1.SP1_redhat_1.1.ep7.el6
redhat/eap7-jboss-xnio-base<3.4.3-2.Final_redhat_1.1.ep7.el6
3.4.3-2.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-netty<4.0.35-2.Final_redhat_1.1.ep7.el6
4.0.35-2.Final_redhat_1.1.ep7.el6
redhat/eap7-picketlink-bindings<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-federation<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-resteasy<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-undertow<1.3.27-1.Final_redhat_1.1.ep7.el6
1.3.27-1.Final_redhat_1.1.ep7.el6
redhat/eap7-wildfly<7.0.5-3.GA_redhat_2.1.ep7.el6
7.0.5-3.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-javadocs<7.0.5-2.GA_redhat_2.1.ep7.el6
7.0.5-2.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-web-console-eap<2.8.29-1.Final_redhat_1.1.ep7.el6
2.8.29-1.Final_redhat_1.1.ep7.el6
redhat/eap7-xml-security<2.0.8-1.redhat_1.1.ep7.el6
2.0.8-1.redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-cli<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-commons<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-core-client<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-dto<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-hornetq-protocol<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-hqclient-protocol<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-jms-client<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-jms-server<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-journal<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-native<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-ra<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-selector<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-server<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-activemq-artemis-service-extensions<1.1.0-16.SP19_redhat_1.1.ep7.el6
1.1.0-16.SP19_redhat_1.1.ep7.el6
redhat/eap7-artemis-native<1.1.0-12.redhat_4.ep7.el6
1.1.0-12.redhat_4.ep7.el6
redhat/eap7-artemis-native-wildfly<1.1.0-12.redhat_4.ep7.el6
1.1.0-12.redhat_4.ep7.el6
redhat/eap7-hibernate<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-hibernate-core<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-hibernate-entitymanager<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-hibernate-envers<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-hibernate-infinispan<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-hibernate-java8<5.0.12-1.Final_redhat_1.1.ep7.el6
5.0.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan-cachestore-jdbc<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan-cachestore-remote<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan-client-hotrod<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan-commons<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan-core<8.1.7-1.Final_redhat_1.1.ep7.el6
8.1.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-jboss-msc<1.2.7-1.SP1_redhat_1.1.ep7.el6
1.2.7-1.SP1_redhat_1.1.ep7.el6
redhat/eap7-jboss-xnio-base<3.4.3-2.Final_redhat_1.1.ep7.el6
3.4.3-2.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-compensations<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-jbosstxbridge<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-jbossxts<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-jts-idlj<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-jts-integration<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-restat-api<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-restat-bridge<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-restat-integration<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-restat-util<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana-txframework<5.2.22-1.Final_redhat_1.1.ep7.el6
5.2.22-1.Final_redhat_1.1.ep7.el6
redhat/eap7-netty<4.0.35-2.Final_redhat_1.1.ep7.el6
4.0.35-2.Final_redhat_1.1.ep7.el6
redhat/eap7-netty-all<4.0.35-2.Final_redhat_1.1.ep7.el6
4.0.35-2.Final_redhat_1.1.ep7.el6
redhat/eap7-picketlink-api<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-bindings<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-common<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-config<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-federation<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-idm-api<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-idm-impl<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-idm-simple-schema<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-impl<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-picketlink-wildfly8<2.5.5-6.SP6_redhat_1.1.ep7.el6
2.5.5-6.SP6_redhat_1.1.ep7.el6
redhat/eap7-resteasy<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-async-http-servlet<3.0-3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0-3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-atom-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-cdi<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-client<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-crypto<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jackson-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jackson2-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jaxb-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jaxrs<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jettison-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jose-jwt<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-jsapi<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-json-p-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-multipart-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-spring<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-validator-provider<11-3.0.19-3.SP1_redhat_1.1.ep7.el6
11-3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-resteasy-yaml-provider<3.0.19-3.SP1_redhat_1.1.ep7.el6
3.0.19-3.SP1_redhat_1.1.ep7.el6
redhat/eap7-undertow<1.3.27-1.Final_redhat_1.1.ep7.el6
1.3.27-1.Final_redhat_1.1.ep7.el6
redhat/eap7-wildfly<7.0.5-3.GA_redhat_2.1.ep7.el6
7.0.5-3.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-javadocs<7.0.5-2.GA_redhat_2.1.ep7.el6
7.0.5-2.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-modules<7.0.5-3.GA_redhat_2.1.ep7.el6
7.0.5-3.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-web-console-eap<2.8.29-1.Final_redhat_1.1.ep7.el6
2.8.29-1.Final_redhat_1.1.ep7.el6
redhat/eap7-xml-security<2.0.8-1.redhat_1.1.ep7.el6
2.0.8-1.redhat_1.1.ep7.el6
redhat/eap7-artemis-native-wildfly<1.1.0-12.redhat_4.ep7.el6
1.1.0-12.redhat_4.ep7.el6
Remediation
Event History
Mar 22, 2017
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2017:0831?
The severity of RHSA-2017:0831 is classified as important.
2
How do I fix RHSA-2017:0831?
To fix RHSA-2017:0831, you must update to the specified remedial versions of affected packages.
3
What systems are affected by RHSA-2017:0831?
RHSA-2017:0831 affects systems running Red Hat JBoss Enterprise Application Platform 7.0.4 and earlier versions.
4
When was RHSA-2017:0831 released?
RHSA-2017:0831 was released on October 20, 2017.
5
What types of vulnerabilities does RHSA-2017:0831 address?
RHSA-2017:0831 addresses various vulnerabilities in the Red Hat JBoss Enterprise Application Platform components.