Moderate: Red Hat JBoss Web Server 7.0.1 release and security update

Moderate: Red Hat JBoss Web Server 7.0.1 release and security update

Important: Red Hat JBoss Web Server 6.2.4 release and security update

Important: Red Hat JBoss Web Server 7.0.0 security release

Important: Red Hat JBoss Web Server 6.2.3 release and security update

Important: Red Hat JBoss Web Server 6.2.3 release and security update

Moderate: Red Hat JBoss Web Server 6.2.2 release and security update

Moderate: Red Hat JBoss Web Server 6.2.2 release and security update

Important: Red Hat JBoss Web Server 6.2.1 release and security update

Important: Red Hat JBoss Web Server 5.8.6 release and security update

Important: Red Hat JBoss Web Server 5.8.6 release and security update

Moderate: Red Hat JBoss Web Server 6.1.1 release and security update

Moderate: Red Hat JBoss Web Server 6.1.1 release and security update

Moderate: Red Hat JBoss Web Server 5.8.5 release and security update

Moderate: Red Hat JBoss Web Server 6.1.0 release and security update

Important: Red Hat JBoss Web Server 6.0.2 release and security update

Moderate: Red Hat JBoss Web Server 5.7.7 release and security update

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

eDeploy has tmp file race condition flaws

eDeploy has RCE via cPickle deserialization of untrusted data

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies

eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

It is possible to remotely Segfault Apache http server with a specially crafted string sent to the modcluster via service messages (MCMP).

Only the VirtualHost explicitly enabled by an administrator to receive service messages from worker nodes (Tomcat or EAP workers). Unless the administrator made a grave mistake in opening an unsecured modcluster management VirtualHost to the Internet without any authentication, it is impossible to exploit this bug from an untrusted client.

Special set of modcluster management protocol HTTP method requests. One could pass a certain number of = symbols in sequence after a legitimate element and cause segfault.

Console: CORS headers set to allow all in Red Hat AMQ.

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.

A security flaw was found in the way init script implementation of the Tomcat service, an Apache Servlet/JSP Engine, as used in various versions of Red Hat Enterprise Linux and Fedora, performed management of Tomcat log file. A local attacker could use this flaw to cause denial of service or, potentially, execute arbitrary code with the privileges of the privileged system user (root) via symbolic link attacks on Tomcat log file.

Acknowledgements:

Red Hat would like to thank Simon Fayer of Imperial College London for reporting this issue.

modproxyajp did not correctly process certain malformed HTTP requests, which could cause it to incorrectly put a backend server to an error state until the retry timeout expired. A remote attacker could send malicious requests to trigger this issue, resulting in a temporary denial of service.

Upstream commit: http://svn.apache.org/viewvc?view=revision&revision=1166551

Reference: http://community.jboss.org/message/625307