Skip to content
OpenAdvisories
High RHSA-2018:1609 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas 0:5.2.0-23.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-client 0:5.2.0-23.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-messaging 0:5.2.0-23.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-ws-native 0:5.2.0-23.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas 0:5.2.0-23.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-client 0:5.2.0-23.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-messaging 0:5.2.0-23.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-ws-native 0:5.2.0-23.ep5.el6

Vulnerabilities 2

  • High 7.0
    CVE-2016-8656

    Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script…

    jboss jbossas
  • Unscored —
    CVE-2016-8657

    It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/
  • article
    https://access.redhat.com/articles/3422211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400343
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400344
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1609.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8656
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8656
  • report
    https://access.redhat.com/security/cve/CVE-2016-8657
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8657
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8657