RHSA-2015:1671Medium
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2015-3158 — PicketLink: PicketLink IDP ignores role based authorization
🎯 Affected products153
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- glassfish-jsf-eap6-0:2.1.28-9.redhat_10.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- glassfish-jsf-eap6-0:2.1.28-9.redhat_10.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-core-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-entitymanager-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-envers-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hibernate4-infinispan-eap6-0:4.2.20-1.Final_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hornetq-0:2.3.25-4.SP3_redhat_1.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- hornetq-0:2.3.25-4.SP3_redhat_1.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-appclient-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-appclient-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-cli-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-cli-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-client-all-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-client-all-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-clustering-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-clustering-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-cmp-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-cmp-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-configadmin-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-configadmin-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-connector-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-connector-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-console-0:2.5.6-2.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-console-0:2.5.6-2.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-controller-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-controller-0:7.5.3-1.Final_redhat_2.1.ep6.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- jboss-as-controller-client-0:7.5.3-1.Final_redhat_2.1.ep6.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
- +123 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2015:1671
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1216123
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1247693
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1247698
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1247703
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1247706
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1247710
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1671.json