Skip to content
OpenAdvisories
Critical RHSA-2018:2090 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 87

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-cli 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-commons 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-core-client 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-dto 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hornetq-protocol 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hqclient-protocol 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jdbc-store 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-client 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-server 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-journal 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-native 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-ra 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-selector 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-server 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-service-extensions 0:1.5.5.012-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-commons-logging-jboss-logmanager 0:1.0.3-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-core 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-entitymanager 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-envers 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-infinispan 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-java8 0:5.1.14-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-jdbc 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-cachestore-remote 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-client-hotrod 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-commons 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-infinispan-core 0:8.2.11-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-api 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-impl 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-spi 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-api 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-impl 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-deployers-common 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-jdbc 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-validator 0:1.4.9-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-databind 0:2.8.11.1-1.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-jaxrs-base 0:2.8.11-2.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-jaxrs-json-provider 0:2.8.11-2.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-jaxrs-providers 0:2.8.11-2.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-module-jaxb-annotations 0:2.8.11-2.redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-logmanager 0:2.0.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-marshalling 0:2.0.5-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-marshalling-river 0:2.0.5-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-modules 0:1.6.4-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-remoting 0:5.0.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-cli 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-core 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4-to-eap7.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap6.4-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.0-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.0-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly10.1-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.0 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.1 0:1.0.6-3.Final_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-api 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-bindings 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-common 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-config 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-federation 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-api 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-impl 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-simple-schema 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-impl 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-wildfly8 0:2.5.5-12.SP11_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow 0:1.4.18-6.SP7_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly 0:7.1.3-2.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron 0:1.1.10-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron-tool 0:1.0.7-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-javadocs 0:7.1.3-1.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-modules 0:7.1.3-2.GA_redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-naming-client 0:1.0.8-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-openssl 0:1.0.6-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-openssl-java 0:1.0.6-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-web-console-eap 0:2.9.17-1.Final_redhat_1.1.ep7.el6

Vulnerabilities 2

  • Critical 9.8
    CVE-2018-7489 Public exploit EPSS 20%

    FasterXML jackson-databind allows unauthenticated remote code execution

    FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JS…

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • Medium 6.5
    CVE-2018-1114

    Uncontrolled Resource Consumption in Undertow

    It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

    Red Hat undertow undertow undertow Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/?version=7.1
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549276
  • article
    https://issues.redhat.com/browse/JBEAP-14430
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2090.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1573045
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1114
  • article
    https://bugs.openjdk.java.net/browse/JDK-6956385
  • article
    https://issues.jboss.org/browse/UNDERTOW-1338
  • report
    https://access.redhat.com/security/cve/CVE-2018-7489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7489
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7489
  • article
    https://access.redhat.com/solutions/3442891