RHEA-2015:0945High

Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update

Published
May 5, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2015-0298 →

📋 Description

CVE-2015-0298 — mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

🎯 Affected products156

  • Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-eap6-1:1.0.15-8.redhat_1.ep6.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-9.redhat_2.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-9.redhat_2.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-jsvc-eap6-1:1.0.15-9.redhat_2.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-9.redhat_2.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-9.redhat_2.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-dbcp-eap6-0:1.4-13.1.redhat_2.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-dbcp-eap6-0:1.4-13.1.redhat_2.ep6.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-dbcp-tomcat-eap6-0:1.4-13.1.redhat_2.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-pool-eap6-0:1.6.0-1.redhat_7.1.ep6.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apache-commons-pool-tomcat-eap6-0:1.6.0-1.redhat_7.1.ep6.el6.noarch as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-0:1.4.8-6.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-0:1.4.8-6.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-0:1.4.8-6.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-debuginfo-0:1.4.8-6.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-debuginfo-0:1.4.8-6.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-devel-0:1.4.8-6.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-jws3-devel-0:1.4.8-6.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-0:1.5.2-8.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-0:1.5.2-8.ep7.el6.src as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-0:1.5.2-8.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-debuginfo-0:1.5.2-8.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-debuginfo-0:1.5.2-8.ep7.el6.x86_64 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • apr-util-jws3-devel-0:1.5.2-8.ep7.el6.i686 as a component of Red Hat JBoss Web Server 3.0 for RHEL 6
  • +126 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (3)