RHSA-2020:3144: Important: Red Hat JBoss Enterprise Application Platform 7.2 security update

Published Jul 23, 2020

Updated

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.This asynchronous patch is a security update for the Infinispan package in Red Hat JBoss Enterprise Application Platform 7.2.Security Fix(es): wildfly: unsafe deserialization in Wildfly Enterprise Java Beans (CVE-2020-10740) jboss-ejb-client: wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service (CVE-2020-14307) jboss-ejb-client: wildfly: Some EJB transaction objects may get accumulated causing Denial of Service (CVE-2020-14297) For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat JBoss Enterprise Application Platform

Remediation

Event History

Jul 23, 2020

Advisory Published

12:00 AM

Data Sourced

12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:3144?

The severity of RHSA-2020:3144 is rated as important.

How do I fix RHSA-2020:3144?

To fix RHSA-2020:3144, you should apply the latest security update to the Infinispan package in Red Hat JBoss Enterprise Application Platform 7.2.

What vulnerabilities are addressed in RHSA-2020:3144?

RHSA-2020:3144 addresses multiple vulnerabilities related to access controls and memory leaks in the Infinispan package.

Which versions of Red Hat JBoss Enterprise Application Platform are affected by RHSA-2020:3144?

RHSA-2020:3144 affects Red Hat JBoss Enterprise Application Platform version 7.2.

Is there a workaround for RHSA-2020:3144?

There are no officially recommended workarounds for RHSA-2020:3144; the best course of action is to apply the security update.