RHSA-2015:1673Medium
Red Hat Security Advisory: jboss-ec2-eap bug fix security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2015-3158 — PicketLink: PicketLink IDP ignores role based authorization
🎯 Affected products4
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
- jboss-ec2-eap-0:7.5.3-1.Final_redhat_2.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
- jboss-ec2-eap-0:7.5.3-1.Final_redhat_2.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
- jboss-ec2-eap-samples-0:7.5.3-1.Final_redhat_2.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, make sure to back up any modified configuration files, deployments, and all user data. After applying the update, restart the instance of Red Hat JBoss Enterprise Application Platform for the changes to take effect. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2015:1673
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1216123
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1673.json