RHSA-2017:1260: Moderate: jboss-ec2-eap security, bug fix, and enhancement update
The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).<br>With this update, the jboss-ec2-eap package has been updated to ensure compatibility with Red Hat JBoss Enterprise Application Platform 6.4.15.<br>Security Fix(es):<br><li> It was discovered that under certain conditions RESTEasy could be forced to parse a request with YamlProvider, resulting in unmarshalling of potentially untrusted data. An attacker could possibly use this flaw execute arbitrary code with the permissions of the application using RESTEasy. (CVE-2016-9606)</li> Red Hat would like to thank Moritz Bechler (AgNO3 GmbH & Co. KG) for reporting these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2017:1260?
The severity of RHSA-2017:1260 is classified as moderate.
How do I fix RHSA-2017:1260?
To fix RHSA-2017:1260, you should update to the jboss-ec2-eap package version 7.5.15-3.Final_redhat_3.ep6.el6.
Which packages are affected by RHSA-2017:1260?
The affected packages for RHSA-2017:1260 include jboss-ec2-eap and jboss-ec2-eap-samples.
What compatibility issues are addressed in RHSA-2017:1260?
RHSA-2017:1260 addresses compatibility issues with the Red Hat JBoss Enterprise Application Platform on AWS EC2.
When was RHSA-2017:1260 released?
RHSA-2017:1260 was released on December 12, 2017.