RHEA-2015:0944High

Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update

Published
May 5, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2015-0298 →

📋 Description

CVE-2015-0298 — mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

🎯 Affected products106

  • Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-9.redhat_2.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-9.redhat_2.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-9.redhat_2.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-dbcp-eap6-0:1.4-13.1.redhat_2.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-dbcp-eap6-0:1.4-13.1.redhat_2.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-dbcp-tomcat-eap6-0:1.4-13.1.redhat_2.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • apache-commons-pool-tomcat-eap6-0:1.6.0-1.redhat_7.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • c3p0-0:0.9.5-7.redhat_1.1.ep7.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • c3p0-0:0.9.5-7.redhat_1.1.ep7.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • eap6-0:1-1.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • eap6-0:1-1.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • eap6-ecj-0:4.4.2-1.redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • eap6-ecj-0:4.4.2-1.redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • eap6-runtime-0:1-1.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate-jpa-2.0-api-0:1.0.1-6.Final_redhat_3.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate-jpa-2.0-api-0:1.0.1-6.Final_redhat_3.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate3-commons-annotations-0:4.0.2-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate3-commons-annotations-0:4.0.2-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate3-commons-annotations-javadoc-0:4.0.2-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • hibernate4-c3p0-eap6-0:4.2.18-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 7
  • +76 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (3)