Description
Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss Web Platform 5 | aopalliance | 1.0-5.2.jdk6.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | apache-cxf | 2.2.12-6.1.patch_04.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | bsh2 +1 | 2.0-0.b4.15.patch01.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | glassfish-jaxb | 2.1.12-12_patch_03.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | google-guice | 2.0-3.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | hibernate3 +1 | 1:3.3.2-1.5.GA_CP05.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | hibernate3-annotations +1 | 3.4.0-3.3.GA_CP05.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | hibernate3-entitymanager +1 | 3.4.0-4.4.GA_CP05.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | hibernate3-search +1 | 3.1.1-2.3.GA_CP05.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | hsqldb | 2:1.8.0.10-11_patch_01.1.ep5.el6 | RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jacorb-jboss | 2.3.2-2.jboss_1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | javassist | 3.12.0-6.SP1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-aop2 | 2.1.6-5.CP06.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-bootstrap | 1.0.2-1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-cache-core | 3.2.11-1.GA.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-cache-pojo | 3.0.1-1.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-cl | 2.0.11-1.GA.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-cluster-ha-server-api | 1.2.1-2.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-common-beans | 1.0.1-2.Final.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-common-core | 2.2.21-1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-eap5-native | 5.2.0-6.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-cache | 1.0.0-4.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-core | 1.3.9-0.4.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-ext-api | 1.0.0-4.1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-ext-api-impl | 1.0.0-3.7.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-interceptors | 1.0.9-0.1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-metadata | 1.0.0-3.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-metrics-deployer | 1.1.1-0.1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-security | 1.0.2-0.5.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-timeout +2 | 0.1.1-0.5.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-ejb3-transactions | 1.0.2-1.4.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-javaee +8 | 5.0.2-2.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-jaxrpc-api_1.1_spec | 1.0.0-16.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-jpa-deployers | 1.0.0-6.SP2.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-logmanager | 1.1.2-6.GA_patch_01.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-naming | 5.0.3-5.CP02.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-reflect | 2.0.4-2.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-remoting | 2.5.4-10.SP4.1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-seam2 +3 | 2.2.6.EAP5-9.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-security-negotiation | 2.1.3-1.GA.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-security-spi | 1:2.0.5-4.SP3_1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jboss-vfs2 | 2.2.1-2.GA.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossas-web +3 | 5.2.0-7.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossas-ws-cxf-ewp | 5.2.0-7.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbosssx2 | 2.0.5-8.SP3_1.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossts +1 | 1:4.6.1-12.CP13.7.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossweb +4 | 2.1.13-2_patch_01.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossws | 3.1.2-13.SP15_patch_01.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossws-common | 1.1.0-9.SP10.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossws-framework | 3.1.2-9.SP13.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jbossws-spi | 1.1.2-6.SP8.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jgroups | 1:2.6.22-1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jopr-embedded | 1.3.4-19.SP6.9.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jopr-hibernate-plugin | 3.0.0-14.EmbJopr5.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | jopr-jboss-cache-v3-plugin | 3.0.0-15.EmbJopr5.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | mod_cluster +4 | 1.0.10-12.2.GA_CP04.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | mod_cluster-native | 1.0.10-10.GA_CP04_patch01.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | picketlink-federation | 2.1.5-3.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | picketlink-quickstarts +3 | 2.1.5-1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | resteasy +3 | 1.2.1-17.CP02_patch02.1.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | rh-ewp-docs +1 | 5.2.0-6.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | rhq +14 | 3.0.0-21.EmbJopr5.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | rhq-helpers +8 | 3.0.0-21.EmbJopr5.ep5.el6 | RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | rhq-jmx-plugin | 3.0.0-21.EmbJopr5.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | rhq-platform-plugin +1 | 3.0.0-14.EmbJopr5.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | spring2 +6 | 2.5.6-9.SEC03.1.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | wss4j | 1.5.12-4_patch_02.ep5.el6 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | xerces-j2 +1 | 2.9.1-10.patch02.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | xml-commons +8 | 1.3.04-8.2_patch_01.ep5.el5 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5 | xml-security | 1.5.1-2.ep5.el4 | RHSA-2013:0197, RHSA-2013:0196, RHSA-2013:0195 |
| Red Hat JBoss EAP 6 | antlr-eap6 | 2.7.7-15_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-beanutils | 1.8.3-10.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-cli | 1.2-7.5.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-codec-eap6 | 1.4-14.redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-collections | 3.2.1-10.redhat_2.ep6.el5 | RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-collections-eap6 | 3.2.1-13.redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-configuration | 1.6-7.2.redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-daemon-jsvc-eap6 | 1:1.0.10-3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-io-eap6 | 2.1-6.redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-lang | 2.6-3.redhat_2.ep6.el5 | RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-lang-eap6 | 2.6-5redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-commons-pool-eap6 | 1.5.6-8.redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-cxf | 2.4.9-4.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | apache-mime4j | 0.6-7.redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | atinject | 1-8.2_redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | cal10n | 0.7.3-8.redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | codehaus-jackson +4 | 1.9.2-6_redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | cxf-xjc-dv +3 | 2.4.0-11.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | dom4j | 1.6.1-14_redhat_3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | glassfish-jaf | 1.1.1-14.redhat_2.ep6.el6.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | glassfish-javamail | 1.4.4-16.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | glassfish-jaxb | 2.2.5-10_redhat_3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | glassfish-jsf | 2.1.13-1_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | glassfish-jsf12 | 1.2_15-8_b01_redhat_2.ep6.el6.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | gnu-getopt | 1.0.13-1.2_redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | guava +1 | 11.0.2-0.5.redhat_2.ep6.el5.6 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | h2database | 1.3.168-2_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hibernate-beanvalidation-api | 1.0.0-4.7.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hibernate-jpa-2.0-api | 1.0.1-5.Final_redhat_2.1.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hibernate3-commons-annotations | 4.0.1-5.Final_redhat_2.1.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hibernate4 +4 | 4.1.6-3.5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hibernate4-validator | 4.2.0-7.Final_redhat_2.1.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hornetq | 2.2.23-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | hornetq-native +1 | 2.2.21-1.Final.ep6.el6 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | httpcomponents | 5-4_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | httpcomponents-httpclient | 4.1.3-4_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | httpcomponents-httpcore | 4.1.4-4_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | httpd +2 | 2.2.22-14.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | httpserver | 1.0.1-3.Final_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | infinispan +4 | 5.1.8-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | ironjacamar | 1.0.13-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jacorb-jboss | 2.3.2-3.redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jandex | 1.0.3-7.Final_redhat_2.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | javassist +1 | 3.15.0-5.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jaxbintros | 1.0.2-11.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jaxen | 1.1.3-8.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jaxws-jboss-httpserver-httpspi | 1.0.1-3.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-deployment | 1.1.0-2.Final_redhat_3.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-framework-core | 1.3.1-3.CR1_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-metadata +1 | 2.1.0-2.Final_redhat_3.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-repository | 1.2.0-1.Final_redhat_2.ep6.el6.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-spi | 3.1.0-3.Final_redhat_3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbosgi-vfs | 1.1.0-1.Final_redhat_2.ep6.el6.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-annotations-api_1.1_spec | 1.0.1-3.2.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-as-client-all | 7.1.3-4.1.Final_redhat_4.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-as-console | 1.4.2-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-as-ee +55 | 7.1.3-4.Final_redhat_4.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-common-beans | 1.0.0-5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-common-core | 1:2.2.17-10.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-connector-api_1.6_spec | 1.0.1-3.3.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-dmr | 1.1.1-8.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-ejb-api_3.1_spec | 1.0.2-10.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-ejb-client | 1.0.11-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-ejb3-ext-api | 2.0.0-9.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-el-api_2.2_spec | 1.0.2-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-iiop-client | 1.0.0-4.Final_redhat_2.1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-invocation | 1.1.1-5.Final_redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jacc-api_1.4_spec | 1.0.2-5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jad-api_1.2_spec +1 | 1.0.1-6.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jaxb-api_2.2_spec | 1.0.4-3.Final_redhat_2.1.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jaxr-api_1.0_spec | 1.0.2-4.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jaxws-api_2.2_spec | 2.0.1-5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jms-api_1.1_spec +3 | 1.0.1-4.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jsf-api_2.1_spec | 2.0.7-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jsp-api_2.2_spec +2 | 1.0.1-5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-jstl-api_1.2_spec | 1.0.3-3.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-logging | 3.1.2-3.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-logmanager | 1.3.2-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-marshalling | 1.3.15-2.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-metadata +5 | 7.0.4-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-modules | 1.1.3-2.GA_redhat_1.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-msc | 1.0.2-3.GA_redhat_2.2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-osgi-logging | 1.0.0-4._redhat_2.1.ep6.el6.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-remote-naming | 1.0.4-2.Final_redhat_1.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-remoting3 | 3.2.14-1.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-remoting3-jmx | 1.0.4-2.Final_redhat_1.ep6.el5.7 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-rmi-api_1.0_spec | 1.0.4-9.2.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-saaj-api_1.3_spec | 1.0.2-4_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-sasl +1 | 1.0.3-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-seam-int | 6.0.0-8.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-security-negotiation | 2.2.1-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-security-xacml | 2.0.8-5.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-servlet-api_2.5_spec | 1.0.1-9.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-servlet-api_3.0_spec | 1.0.1-11.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-specs-parent | 1.0.0-5.Beta2_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-stdio | 1.0.1-7.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-threads | 2.0.0-7.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-transaction-spi | 7.0.0-0.10.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-vfs2 | 3.1.0-4.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-weld-1.1-api | 1.1-6.Final_redhat_2.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jboss-xnio-base | 3.0.7-1.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossas-javadocs | 7.1.3-4.Final_redhat_3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossts | 1:4.16.6-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossweb +1 | 7.0.17-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-api | 1.0.0-3.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-common | 2.0.4-5.GA_redhat_3.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-common-tools | 1.0.2-1.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-cxf | 4.0.6-2.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-native | 4.0.6-1.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossws-spi | 2.0.4-3.1.GA_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jbossxb2 | 2.0.3-13.GA_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jcip-annotations | 1.0-2.2.3_redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jdom-eap6 | 1.1.2-4.GA_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jettison | 1.3.1-7_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jgroups | 1:3.0.14-2.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jline-eap6 | 0.9.94-10.GA_redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | joda-time | 1.6.2-5.redhat_3.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jtype | 0.1.1-9_redhat_2.3.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | juddi | 3.1.3-2_redhat_2.1.ep6.el6.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jul-to-slf4j-stub | 1.0.0-4.Final_redhat_2.1.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | jython-eap6 | 2.5.2-5.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | log4j-eap6 | 1.2.16-11.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | log4j-jboss-logmanager | 1.0.1-3.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | mod_cluster +1 | 1.2.3-1.Final_redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | mod_cluster-native | 1.2.3-3.Final.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | mod_jk +1 | 1.2.36-5.ep6.el6 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | mod_ssl | 1:2.2.22-14.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | netty | 3.2.6-2_redhat_2.2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | objectweb-asm-eap6 | 3.3.1-5_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | org.apache.felix.configadmin | 1.2.8-4_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | org.apache.felix.log | 1.0.0-5.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | org.osgi +2 | 4.2.0-4.redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | picketbox | 4.0.14-2.Final_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | picketbox-commons | 1.0.0-0.8.final_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | picketlink-federation | 2.1.3.1-3.redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | relaxngDatatype | 2011.1-0.1_redhat_3.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | resteasy | 2.3.4-4.Final_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | rngom | 201103-0.5.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | scannotation | 1.0.2-8.redhat_2.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | shrinkwrap | 1.0.0-16.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | slf4j +1 | 1.6.1-23.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | slf4j-jboss-logmanager | 1.0.0-7.GA_redhat_2.3.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | snakeyaml | 1.8-8.redhat_2.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | staxmapper | 1.1.0-6.Final_redhat_2.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | stilts | 0.1.26-6.GA.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-codemodel | 2.6-3_redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-istack-commons | 1:2.6.1-9_redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-saaj-1.3-impl | 1.3.16-8.redhat_2.ep6.el6.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-txw2 | 20110809-5_redhat_2.ep6.el6.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-ws-metadata-2.0-api | 1.0.MR1-12_MR1_redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | sun-xsom | 20110809-5_redhat_3.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | tomcat-native +1 | 1.1.24-1.ep6.el6 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | velocity-eap6 | 1.6.3-7.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | weld-cdi-1.0-api | 1.0-6.SP4_redhat_2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | weld-core | 1.1.10-2.Final_redhat_1.ep6.el5.1 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | woodstox-core | 4.1.1-1.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | woodstox-stax2-api | 3.1.1-1.redhat_2.ep6.el5.4 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | ws-commons-XmlSchema | 2.0.2-7.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | ws-commons-neethi | 3.0.2-5.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | ws-scout | 1.2.6-3.redhat_2.2.ep6.el5.5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | wsdl4j-eap6 | 1.6.2-11.redhat_2.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | wss4j | 1.6.7-1.redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | xalan-j2-eap6 | 2.7.1-6.12.redhat_3.ep6.el5.2 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | xerces-j2-eap6 | 2.9.1-13_redhat_3.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | xml-commons-resolver-eap6 | 1.2-10.redhat_2.ep6.el5.3 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | xml-security | 1.5.2-2.redhat_1.ep6.el5 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 6 | xom | 1.2.7-1._redhat_3.1.ep6.el5.6 | RHSA-2012:1592, RHSA-2012:1591 |
| Red Hat JBoss EAP 5 | aopalliance | 1.0-5.2.jdk6.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | apache-cxf | 2.2.12-6.1.patch_04.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | bsh2 +1 | 2.0-0.b4.15.patch01.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | glassfish-jaxb | 2.1.12-12_patch_03.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | google-guice | 2.0-3.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hibernate3 +1 | 1:3.3.2-1.5.GA_CP05.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hibernate3-annotations +1 | 3.4.0-3.3.GA_CP05.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hibernate3-entitymanager +1 | 3.4.0-4.4.GA_CP05.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hibernate3-search +1 | 3.1.1-2.3.GA_CP05.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hornetq | 2.2.24-1.EAP.GA.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hornetq-native | 2.2.20-1.EAP.GA.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | hsqldb | 2:1.8.0.10-11_patch_01.1.ep5.el6 | RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jacorb-jboss | 2.3.2-2.jboss_1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | javassist | 3.12.0-6.SP1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-aop2 | 2.1.6-5.CP06.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-bootstrap | 1.0.2-1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-cache-core | 3.2.11-1.GA.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-cache-pojo | 3.0.1-1.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-cl | 2.0.11-1.GA.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-cluster-ha-server-api | 1.2.1-2.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-common-beans | 1.0.1-2.Final.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-common-core | 2.2.21-1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-eap5-native | 5.2.0-6.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-cache | 1.0.0-4.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-core | 1.3.9-0.4.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-ext-api | 1.0.0-4.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-ext-api-impl | 1.0.0-3.7.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-interceptors | 1.0.9-0.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-metadata | 1.0.0-3.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-metrics-deployer | 1.1.1-0.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-security | 1.0.2-0.5.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-timeout +2 | 0.1.1-0.5.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-ejb3-transactions | 1.0.2-1.4.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-javaee +8 | 5.0.2-2.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-jaxrpc-api_1.1_spec | 1.0.0-16.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-jpa-deployers | 1.0.0-6.SP2.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-logmanager | 1.1.2-6.GA_patch_01.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-messaging | 1.4.8-12.SP9.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-naming | 5.0.3-5.CP02.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-reflect | 2.0.4-2.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-remoting | 2.5.4-10.SP4.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-seam2 +3 | 2.2.6.EAP5-9.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-security-negotiation | 2.1.3-1.GA.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-security-spi | 1:2.0.5-4.SP3_1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jboss-vfs2 | 2.2.1-2.GA.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossas +3 | 5.2.0-14.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossas-hornetq | 5.2.0-5.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossas-tp-licenses | 5.2.0-7.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossas-ws-cxf | 5.2.0-7.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbosssx2 | 2.0.5-8.SP3_1.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossts +1 | 1:4.6.1-12.CP13.7.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossweb +4 | 2.1.13-2_patch_01.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossws | 3.1.2-13.SP15_patch_01.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossws-common | 1.1.0-9.SP10.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossws-framework | 3.1.2-9.SP13.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jbossws-spi | 1.1.2-6.SP8.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jgroups | 1:2.6.22-1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jopr-embedded | 1.3.4-19.SP6.9.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jopr-hibernate-plugin | 3.0.0-14.EmbJopr5.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | jopr-jboss-cache-v3-plugin | 3.0.0-15.EmbJopr5.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | mod_cluster +4 | 1.0.10-12.2.GA_CP04.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | mod_cluster-native | 1.0.10-10.GA_CP04_patch01.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | netty | 3.2.5-6.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | picketlink-federation | 2.1.5-3.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | picketlink-quickstarts +3 | 2.1.5-1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | resteasy +3 | 1.2.1-17.CP02_patch02.1.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | rh-eap-docs +1 | 5.2.0-6.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | rhq +23 | 3.0.0-21.EmbJopr5.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | rhq-jmx-plugin | 3.0.0-21.EmbJopr5.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | rhq-platform-plugin +1 | 3.0.0-14.EmbJopr5.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | spring2 +6 | 2.5.6-9.SEC03.1.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | wss4j | 1.5.12-4_patch_02.ep5.el6 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | xerces-j2 | 2.9.1-10.patch02.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | xerces-j2-scripts | 2.9.1-10.patch02.ep5.el5 | RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | xml-commons +8 | 1.3.04-8.2_patch_01.ep5.el5 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
| Red Hat JBoss EAP 5 | xml-security | 1.5.1-2.ep5.el4 | RHSA-2013:0193, RHSA-2013:0192, RHSA-2013:0191 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.cxf:cxf | >= 2.4.0, < 2.4.8 | 2.4.8 | GHSA-2g99-c67p-56hm |
| Maven | org.apache.cxf:cxf | >= 2.5.0, < 2.5.4 | 2.5.4 | GHSA-2g99-c67p-56hm |
| Maven | org.apache.cxf:cxf | >= 2.6.0, < 2.6.1 | 2.6.1 | GHSA-2g99-c67p-56hm |
Advisories 8
- RHSA-2013:0197 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0196 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0195 Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0192 Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0193 Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2013:0191 Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:1592 Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:1591 Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update Red Hat Security Advisories (RHSA) · Aug 5, 2026
References
- RHSA-2012:1559 vendor-advisory
- http://cxf.apache.org/cve-2012-2379.html
- RHSA-2013:0192 vendor-advisory
- RHSA-2013:0198 vendor-advisory
- RHSA-2012:1594 vendor-advisory
- RHSA-2013:0195 vendor-advisory
- RHSA-2013:0196 vendor-advisory
- 51607 third-party-advisory
- RHSA-2013:0193 vendor-advisory
- 51984 third-party-advisory
- RHSA-2012:1592 vendor-advisory
- http://svn.apache.org/viewvc?view=revision&revision=1338219
- RHSA-2013:0191 vendor-advisory
- RHSA-2012:1593 vendor-advisory
- RHSA-2012:1573 vendor-advisory
- RHSA-2012:1591 vendor-advisory
- RHSA-2013:0197 vendor-advisory
- RHSA-2013:0194 vendor-advisory
- [cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html mailing-list
- [cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html mailing-list
- [cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html mailing-list
- [cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html mailing-list
- [cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html mailing-list
- [cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html mailing-list