- Vulnerability/
- RHSA-2020:2561
RHSA-2020:2561: Critical: EAP Continuous Delivery Technical Preview Release 12 security update
First published: Mon Jun 15 2020(Updated: )
Red Hat JBoss Enterprise Application Platform CD12 is a platform for Java applications based on the WildFly application runtime.<br>This release of Red Hat JBoss Enterprise Application Platform CD12 includes bug fixes and enhancements. <br>Security Fix(es):<br><li> artemis: artemis/hornetq: memory exhaustion via UDP and JGroups discovery (CVE-2017-12174)</li> <li> lucene: Solr: Code execution via entity expansion (CVE-2017-12629)</li> <li> infinispan-core: infinispan: Unsafe deserialization of malicious object injected into data cache (CVE-2017-15089)</li> <li> slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)</li> <li> elytron: client can use bogus uri in digest authentication (CVE-2017-12196)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat JBoss Enterprise Application Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1498378
- https://bugzilla.redhat.com/show_bug.cgi?id=1501529
- https://bugzilla.redhat.com/show_bug.cgi?id=1503055
- https://bugzilla.redhat.com/show_bug.cgi?id=1503610
- https://bugzilla.redhat.com/show_bug.cgi?id=1548909
- https://access.redhat.com/security/updates/classification/#critical
- https://access.redhat.com/errata/RHSA-2020:2561 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2020:2561?
The severity of RHSA-2020:2561 is categorized as important due to potential vulnerabilities in the Red Hat JBoss Enterprise Application Platform.
How do I fix RHSA-2020:2561?
To fix RHSA-2020:2561, update your Red Hat JBoss Enterprise Application Platform to the latest patched version provided by Red Hat.
What vulnerabilities are addressed in RHSA-2020:2561?
RHSA-2020:2561 addresses multiple security vulnerabilities affecting the messaging service in the JBoss Enterprise Application Platform.
Is my system vulnerable if I am using Red Hat JBoss Enterprise Application Platform CD12?
Yes, if you are using Red Hat JBoss Enterprise Application Platform CD12 without the latest updates, your system may be vulnerable to the issues identified in RHSA-2020:2561.
When was RHSA-2020:2561 released?
RHSA-2020:2561 was released on September 29, 2020.
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:2561
- agent/trending
- agent/title
- agent/references
- agent/remedy
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request