Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.6 update
🔗 CVE IDs covered (2)
📋 Description
CVE-2015-5220 — OOME from EAP 6 http management console CVE-2016-0800 — SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)
🎯 Affected products1
- Red Hat JBoss Operations Network 3.3
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Operations Network installation (including its databases, applications, configuration files, the JBoss Operations Network server's file system directory, and so on). Refer to the JBoss Operations Network 3.3.6 Release Notes for installation information. To mitigate CVE-2016-3737 you need to manually configure JON to use SSL client authentication between servers and agents. Detailed instructions can be found in the "Setting up Client Authentication Between Servers and Agents" section of the "Configuring JON Servers and Agents" guide linked to in the References section.
🔗 References (47)
- selfhttps://access.redhat.com/errata/RHSA-2016:1519
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=3.3
- externalhttps://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Operations_Network/3.3/html/Admin_and_Config/JBoss_ON_and_SSL-Authentication.html
- externalhttps://access.redhat.com/articles/2570101
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1184000
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1186300
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1205429
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1206485
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1207232
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1211341
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1212495
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1213812
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1218129
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1232836
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1253647
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1255597
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1257741
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1261890
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1264001
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1266356
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1268329
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1272358
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1272473
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1288455
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1290436
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1295863
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1297702
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1298144
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1299448
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301575
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1302322
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1306231
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1306602
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1308947
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1309481
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1310593
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1311140
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1312847
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1317993
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1320478
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1323325
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1324828
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1328316
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1333618
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1339301
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1519.json