Skip to content
OpenAdvisories
Medium RHSA-2017:3218 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 70

ReleasePackageFixed in
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 hornetq 0:2.3.25-24.SP22_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-appclient 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cli 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-client-all 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-clustering 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-cmp 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-configadmin 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-connector 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-controller-client 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-core-security 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-repository 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-deployment-scanner 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-http 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-domain-management 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ee-deployment 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-ejb3 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-embedded 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-host-controller 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jacorb 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxr 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jaxrs 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jdr 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jmx 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jpa 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsf 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-jsr77 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-logging 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-mail 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-management-client-content 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-messaging 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-modcluster 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-naming 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-network 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-configadmin 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-osgi-service 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-picketlink 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-platform-mbean 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-pojo 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-process-controller 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-protocol 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-remoting 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-sar 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-security 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-server 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-system-jmx 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-threads 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-transactions 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-version 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-web 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-webservices 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-weld 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-as-xts 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-logmanager 0:1.5.8-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jboss-remoting3 0:3.3.12-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-appclient 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-bundles 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-core 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-domain 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-javadocs 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-modules-eap 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-product-eap 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-standalone 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossas-welcome-content-eap 0:7.5.18-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 jbossweb 0:7.5.26-1.Final_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 picketlink-bindings 0:2.5.4-20.SP16_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 picketlink-federation 0:2.5.4-18.SP16_redhat_1.1.ep6.el7
Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el7 resteasy 0:2.3.22-1.Final_redhat_1.1.ep6.el7

Vulnerabilities 1

  • Medium 6.5
    CVE-2017-2582

    keycloak-core discloses system properties

    It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the atta…

    Red Hat keycloak org.keycloak:keycloak-core Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1410481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1498255
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3218.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-2582
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-2582
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-2582