Skip to content
OpenAdvisories
Unscored RHSA-2009:0346 1 CVE

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP06 update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 glassfish-jsf 0:1.2_10-0jpp.ep1.5.ep5.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-javadoc 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jacorb 0:2.3.0-1jpp.ep1.7.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jakarta-commons-fileupload 1:1.1.1-3jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jakarta-commons-io 0:1.1-0.20051005.2jpp_1rh
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jakarta-commons-logging-jboss 0:1.1-4.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-cache 0:1.4.1-6.SP11.1.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-jaxr 0:1.2.0-SP2.0jpp.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-remoting 0:2.2.2-3.SP11.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam 0:1.2.1-1.ep1.18.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam-docs 0:1.2.1-1.ep1.18.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-vfs 0:1.0.0-1.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas 0:4.2.0-4.GA_CP06.3.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas-4.2.0.GA_CP06-bin 0:4.2.0-4.GA_CP06.3.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas-client 0:4.2.0-4.GA_CP06.3.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossts 1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossweb 0:2.0.0-6.CP09.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jgroups 1:2.4.5-2.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs 0:4.2.0-5.GA_CP06.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs-examples 0:4.2.0-5.GA_CP06.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 tanukiwrapper 0:3.2.1-2jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 tanukiwrapper-debuginfo 0:3.2.1-2jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 ws-commons-policy 0:1.0-2jpp.ep1.7.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 ws-scout0 0:0.7-0.rc2.4.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 xalan-j2 0:2.7.0-2jpp.ep1.5.el4

Vulnerabilities 1

  • Unscored —
    CVE-2009-0027

    The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 …

References

  • article
    http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp06/html-single/readme/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=479668
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0346.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0027
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0027
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0027