Skip to content
OpenAdvisories
High RHSA-2017:0831 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.5 on RHEL 6

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 78

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-cli 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-commons 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-core-client 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-dto 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hornetq-protocol 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hqclient-protocol 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-client 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-server 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-journal 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-native 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-ra 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-selector 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-server 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-service-extensions 0:1.1.0-16.SP19_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-artemis-native 0:1.1.0-12.redhat_4.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-artemis-native-wildfly 0:1.1.0-12.redhat_4.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-core 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-entitymanager 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-envers 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-infinispan 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-java8 0:5.0.12-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-jdbc 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-remote 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-client-hotrod 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-commons 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-core 0:8.1.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-msc 0:1.2.7-1.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-xnio-base 0:3.4.3-2.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-compensations 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jbosstxbridge 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jbossxts 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jts-idlj 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jts-integration 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-api 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-bridge 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-integration 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-util 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-txframework 0:5.2.22-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-netty 0:4.0.35-2.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-netty-all 0:4.0.35-2.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-api 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-bindings 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-common 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-config 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-federation 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-api 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-impl 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-simple-schema 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-impl 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-wildfly8 0:2.5.5-6.SP6_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-async-http-servlet-3.0 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-atom-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-cdi 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-client 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-crypto 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jackson-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jackson2-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jaxb-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jaxrs 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jettison-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jose-jwt 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-jsapi 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-json-p-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-multipart-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-spring 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-validator-provider-11 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-resteasy-yaml-provider 0:3.0.19-3.SP1_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow 0:1.3.27-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly 0:7.0.5-3.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-javadocs 0:7.0.5-2.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-modules 0:7.0.5-3.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-web-console-eap 0:2.8.29-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-xml-security 0:2.0.8-1.redhat_1.1.ep7.el6

Vulnerabilities 2

  • High 7.5
    CVE-2016-9589

    Red Hat Wildfly DoS

    Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill m…

    Red Hat wildfly org.wildfly:wildfly-undertow Maven
  • High 7.0
    CVE-2016-8656

    Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script…

    jboss jbossas

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/
  • article
    https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/installation-guide/
  • article
    https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404782
  • article
    https://issues.redhat.com/browse/JBEAP-6995
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0831.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8656
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8656
  • report
    https://access.redhat.com/security/cve/CVE-2016-9589
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9589
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9589