Red Hat Security Advisory: Red Hat JBoss Core Services security update

Fixed packages 17

Vulnerabilities 3

• High 7.5
  CVE-2016-2183 Public exploit EPSS 95%

  The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

  openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  Sep 1, 2016
• Unscored —
  CVE-2015-3185 EPSS 16%

  The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider …

  apache2 apache2 Debian Ubuntu
  Jul 20, 2015
• Unscored —
  CVE-2017-9788 EPSS 57%

  In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type '…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu
  Jul 13, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en/red-hat-jboss-core-services/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243888
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1369383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1470748
• article
  https://issues.redhat.com/browse/JBCS-329
• article
  https://issues.redhat.com/browse/JBCS-336
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2709.json
• report
  https://access.redhat.com/security/cve/CVE-2015-3185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-3185
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-3185
• article
  http://httpd.apache.org/security/vulnerabilities_24.html#2.4.16
• report
  https://access.redhat.com/security/cve/CVE-2016-2183
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-2183
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-2183
• article
  https://access.redhat.com/articles/2548661
• article
  https://access.redhat.com/errata/RHSA-2016:1940
• article
  https://sweet32.info/
• report
  https://access.redhat.com/security/cve/CVE-2017-9788
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-9788
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-9788
• article
  https://httpd.apache.org/security/vulnerabilities_22.html#2.2.34
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#2.4.27