Skip to content
OpenAdvisories
Critical RHSA-2016:1434 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 74

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 apache-cxf 0:2.7.18-2.SP1_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 glassfish-jsf-eap6 0:2.1.28-11.SP10_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hibernate4-validator 0:4.3.3-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hornetq 0:2.3.25-13.SP11_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-appclient 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cli 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-client-all 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-clustering 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cmp 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-configadmin 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-connector 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller-client 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-core-security 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-repository 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-scanner 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-http 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-management 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee-deployment 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ejb3 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-embedded 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-host-controller 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jacorb 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxr 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxrs 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jdr 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jmx 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jpa 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsf 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsr77 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-logging 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-mail 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-management-client-content 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-messaging 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-modcluster 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-naming 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-network 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-configadmin 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-service 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-picketlink 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-platform-mbean 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-pojo 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-process-controller 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-protocol 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-remoting 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-sar 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-security 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-server 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-system-jmx 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-threads 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-transactions 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-version 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-web 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-webservices 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-weld 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-xts 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-jsf-api_2.1_spec 0:2.1.28-6.SP2_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-msc 0:1.1.6-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-appclient 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-bundles 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-core 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-domain 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-javadocs 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-modules-eap 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-product-eap 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-standalone 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-welcome-content-eap 0:7.5.9-2.Final_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossts 1:4.17.34-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossweb 0:7.5.17-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 picketlink-bindings 0:2.5.4-11.SP9_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 picketlink-federation 0:2.5.4-11.SP9_redhat_2.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 xalan-j2-eap6 0:2.7.1-11.redhat_11.1.ep6.el7

Vulnerabilities 2

  • Critical 9.8
    CVE-2016-2141

    Improper Input Validation in JGroups

    It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the …

    org.jgroups:jgroups libjgroups-java libjgroups-java Debian Ubuntu Maven
  • Medium 4.3
    CVE-2015-5174 EPSS 13%

    Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

    Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash d…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=6.4
  • article
    https://access.redhat.com/articles/2360521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343622
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1434.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5174
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5174
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5174
  • article
    http://seclists.org/bugtraq/2016/Feb/149
  • report
    https://access.redhat.com/security/cve/CVE-2016-2141
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2141
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2141