- Vulnerability/
- RHSA-2017:1260
RHSA-2017:1260: Moderate: jboss-ec2-eap security, bug fix, and enhancement update
First published: Thu May 18 2017(Updated: )
The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).<br>With this update, the jboss-ec2-eap package has been updated to ensure compatibility with Red Hat JBoss Enterprise Application Platform 6.4.15.<br>Security Fix(es):<br><li> It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy. (CVE-2016-9606)</li> Red Hat would like to thank Moritz Bechler (AgNO3 GmbH & Co. KG) for reporting these issues.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/jboss-ec2-eap | <7.5.15-3.Final_redhat_3.ep6.el6 | 7.5.15-3.Final_redhat_3.ep6.el6 |
| redhat/jboss-ec2-eap | <7.5.15-3.Final_redhat_3.ep6.el6 | 7.5.15-3.Final_redhat_3.ep6.el6 |
| redhat/jboss-ec2-eap-samples | <7.5.15-3.Final_redhat_3.ep6.el6 | 7.5.15-3.Final_redhat_3.ep6.el6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2017:1260?
The severity of RHSA-2017:1260 is classified as moderate.
How do I fix RHSA-2017:1260?
To fix RHSA-2017:1260, you should update to the jboss-ec2-eap package version 7.5.15-3.Final_redhat_3.ep6.el6.
Which packages are affected by RHSA-2017:1260?
The affected packages for RHSA-2017:1260 include jboss-ec2-eap and jboss-ec2-eap-samples.
What compatibility issues are addressed in RHSA-2017:1260?
RHSA-2017:1260 addresses compatibility issues with the Red Hat JBoss Enterprise Application Platform on AWS EC2.
When was RHSA-2017:1260 released?
RHSA-2017:1260 was released on December 12, 2017.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2017:1260
- agent/software-canonical-lookup
- package-manager/redhat