Skip to content
OpenAdvisories
High RHSA-2017:1254 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 6

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 88

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-core-eap6 0:4.2.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-eap6 0:4.2.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-entitymanager-eap6 0:4.2.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-envers-eap6 0:4.2.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hibernate4-infinispan-eap6 0:4.2.26-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 hornetq 0:2.3.25-20.SP18_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 httpserver 0:1.0.8-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-api-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-impl-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-common-spi-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-api-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-core-impl-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-deployers-common-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-jdbc-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-spec-api-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 ironjacamar-validator-eap6 0:1.0.38-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-appclient 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cli 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-client-all 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-clustering 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-cmp 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-configadmin 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-connector 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-controller-client 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-core-security 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-repository 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-deployment-scanner 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-http 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-domain-management 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ee-deployment 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-ejb3 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-embedded 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-host-controller 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jacorb 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxr 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jaxrs 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jdr 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jmx 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jpa 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsf 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-jsr77 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-logging 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-mail 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-management-client-content 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-messaging 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-modcluster 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-naming 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-network 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-configadmin 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-osgi-service 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-picketlink 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-platform-mbean 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-pojo 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-process-controller 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-protocol 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-remoting 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-sar 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-security 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-server 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-system-jmx 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-threads 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-transactions 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-version 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-web 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-webservices 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-weld 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-as-xts 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-ejb-client 0:1.0.39-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-security-negotiation 0:2.3.13-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jboss-xnio-base 0:3.0.16-1.GA_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-appclient 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-bundles 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-core 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-domain 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-javadocs 0:7.5.15-3.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-modules-eap 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-product-eap 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-standalone 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossas-welcome-content-eap 0:7.5.15-1.Final_redhat_3.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 jbossweb 0:7.5.22-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketbox 0:4.1.5-1.Final_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketlink-bindings 0:2.5.4-14.SP12_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 picketlink-federation 0:2.5.4-14.SP12_redhat_1.1.ep6.el6
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 resteasy 0:2.3.19-1.Final_redhat_1.1.ep6.el6

Vulnerabilities 1

  • High 8.1
    CVE-2016-9606

    JBoss RESTEasy vulnerable to Improper Input Validation

    JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.

    Red Hat RESTEasy resteasy resteasy3.0 Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437092
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437095
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1254.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9606
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9606
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9606