RHSA-2017:1254: Moderate: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 6

Published May 18, 2017
·
Updated

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7.This release of Red Hat JBoss Enterprise Application Platform 6.4.15 serves as a replacement for Red Hat JBoss Enterprise Application Platform 6.4.14, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.Security Fix(es): It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy. (CVE-2016-9606) Red Hat would like to thank Moritz Bechler (AgNO3 GmbH & Co. KG) for reporting these issues.

Affected Software

163 affected componentsFixes available
redhat/hibernate4-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hornetq<2.3.25-20.SP18_redhat_1.1.ep6.el6
2.3.25-20.SP18_redhat_1.1.ep6.el6
redhat/httpserver<1.0.8-1.Final_redhat_1.1.ep6.el6
1.0.8-1.Final_redhat_1.1.ep6.el6
redhat/ironjacamar-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/jboss-as-appclient<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-cli<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-client-all<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-clustering<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-cmp<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-configadmin<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-connector<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-controller-client<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-core-security<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-deployment-repository<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-deployment-scanner<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-domain-http<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-domain-management<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ee<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ee-deployment<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ejb3<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-embedded<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-host-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jacorb<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jaxr<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jaxrs<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jdr<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jmx<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jpa<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jsf<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jsr77<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-logging<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-mail<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-management-client-content<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-messaging<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-modcluster<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-naming<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-network<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi-configadmin<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi-service<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-picketlink<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-platform-mbean<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-pojo<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-process-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-protocol<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-remoting<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-sar<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-security<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-server<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-system-jmx<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-threads<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-transactions<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-version<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-web<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-webservices<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-weld<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-xts<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-ejb-client<1.0.39-1.Final_redhat_1.1.ep6.el6
1.0.39-1.Final_redhat_1.1.ep6.el6
redhat/jboss-security-negotiation<2.3.13-1.Final_redhat_1.1.ep6.el6
2.3.13-1.Final_redhat_1.1.ep6.el6
redhat/jboss-xnio-base<3.0.16-1.GA_redhat_1.1.ep6.el6
3.0.16-1.GA_redhat_1.1.ep6.el6
redhat/jbossas-appclient<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-bundles<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-core<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-domain<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-javadocs<7.5.15-3.Final_redhat_3.1.ep6.el6
7.5.15-3.Final_redhat_3.1.ep6.el6
redhat/jbossas-modules-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-product-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-standalone<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-welcome-content-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossweb<7.5.22-1.Final_redhat_1.1.ep6.el6
7.5.22-1.Final_redhat_1.1.ep6.el6
redhat/picketbox<4.1.5-1.Final_redhat_1.1.ep6.el6
4.1.5-1.Final_redhat_1.1.ep6.el6
redhat/picketlink-bindings<2.5.4-14.SP12_redhat_1.1.ep6.el6
2.5.4-14.SP12_redhat_1.1.ep6.el6
redhat/picketlink-federation<2.5.4-14.SP12_redhat_1.1.ep6.el6
2.5.4-14.SP12_redhat_1.1.ep6.el6
redhat/resteasy<2.3.19-1.Final_redhat_1.1.ep6.el6
2.3.19-1.Final_redhat_1.1.ep6.el6
redhat/hibernate4-core-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hibernate4-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hibernate4-entitymanager-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hibernate4-envers-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hibernate4-infinispan-eap6<4.2.26-1.Final_redhat_1.1.ep6.el6
4.2.26-1.Final_redhat_1.1.ep6.el6
redhat/hornetq<2.3.25-20.SP18_redhat_1.1.ep6.el6
2.3.25-20.SP18_redhat_1.1.ep6.el6
redhat/httpserver<1.0.8-1.Final_redhat_1.1.ep6.el6
1.0.8-1.Final_redhat_1.1.ep6.el6
redhat/ironjacamar-common-api-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-common-impl-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-common-spi-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-core-api-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-core-impl-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-deployers-common-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-jdbc-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-spec-api-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/ironjacamar-validator-eap6<1.0.38-3.Final_redhat_3.1.ep6.el6
1.0.38-3.Final_redhat_3.1.ep6.el6
redhat/jboss-as-appclient<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-cli<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-client-all<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-clustering<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-cmp<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-configadmin<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-connector<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-controller-client<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-core-security<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-deployment-repository<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-deployment-scanner<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-domain-http<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-domain-management<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ee<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ee-deployment<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-ejb3<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-embedded<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-host-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jacorb<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jaxr<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jaxrs<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jdr<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jmx<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jpa<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jsf<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-jsr77<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-logging<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-mail<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-management-client-content<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-messaging<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-modcluster<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-naming<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-network<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi-configadmin<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-osgi-service<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-picketlink<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-platform-mbean<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-pojo<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-process-controller<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-protocol<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-remoting<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-sar<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-security<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-server<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-system-jmx<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-threads<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-transactions<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-version<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-web<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-webservices<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-weld<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-as-xts<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jboss-ejb-client<1.0.39-1.Final_redhat_1.1.ep6.el6
1.0.39-1.Final_redhat_1.1.ep6.el6
redhat/jboss-security-negotiation<2.3.13-1.Final_redhat_1.1.ep6.el6
2.3.13-1.Final_redhat_1.1.ep6.el6
redhat/jboss-xnio-base<3.0.16-1.GA_redhat_1.1.ep6.el6
3.0.16-1.GA_redhat_1.1.ep6.el6
redhat/jbossas-appclient<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-bundles<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-core<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-domain<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-javadocs<7.5.15-3.Final_redhat_3.1.ep6.el6
7.5.15-3.Final_redhat_3.1.ep6.el6
redhat/jbossas-modules-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-product-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-standalone<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossas-welcome-content-eap<7.5.15-1.Final_redhat_3.1.ep6.el6
7.5.15-1.Final_redhat_3.1.ep6.el6
redhat/jbossweb<7.5.22-1.Final_redhat_1.1.ep6.el6
7.5.22-1.Final_redhat_1.1.ep6.el6
redhat/picketbox<4.1.5-1.Final_redhat_1.1.ep6.el6
4.1.5-1.Final_redhat_1.1.ep6.el6
redhat/picketlink-bindings<2.5.4-14.SP12_redhat_1.1.ep6.el6
2.5.4-14.SP12_redhat_1.1.ep6.el6
redhat/picketlink-federation<2.5.4-14.SP12_redhat_1.1.ep6.el6
2.5.4-14.SP12_redhat_1.1.ep6.el6
redhat/resteasy<2.3.19-1.Final_redhat_1.1.ep6.el6
2.3.19-1.Final_redhat_1.1.ep6.el6

Remediation

Event History

Mar 13, 2026
Advisory Published
via Red Hat·01:33 PM
Data Sourced
via Red Hat·01:33 PM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2017:1254?

RHSA-2017:1254 has a severity rating that indicates it may pose significant risks to the security of affected systems.

2

How do I fix RHSA-2017:1254?

To fix RHSA-2017:1254, you should update to the corrected versions of the affected packages listed in the advisory.

3

What are the affected packages in RHSA-2017:1254?

The affected packages in RHSA-2017:1254 include various components of the JBoss Enterprise Application Platform such as hibernate4, hornetq, and jboss-as.

4

Is RHSA-2017:1254 applicable to all versions of JBoss?

No, RHSA-2017:1254 specifically applies to JBoss Enterprise Application Platform version 6.4.15 and potentially earlier versions.

5

Where can I find more information about RHSA-2017:1254?

More information about RHSA-2017:1254 can be found in the official Red Hat advisory and its associated bug reports.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203