RHSA-2017:0246
- Source
- https://access.redhat.com/errata/RHSA-2017:0246
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2017:0246.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2017:0246
- Related
- Published
- 2024-09-13T14:38:41Z
- Modified
- 2024-11-22T09:36:33Z
- Severity
-
- 7.0 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2017:0246
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/
- https://bugzilla.redhat.com/show_bug.cgi?id=1380852
- https://bugzilla.redhat.com/show_bug.cgi?id=1388240
- https://bugzilla.redhat.com/show_bug.cgi?id=1397484
- https://bugzilla.redhat.com/show_bug.cgi?id=1400344
- https://bugzilla.redhat.com/show_bug.cgi?id=1401971
- https://bugzilla.redhat.com/show_bug.cgi?id=1403851
- https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0246.json
- https://access.redhat.com/security/cve/CVE-2016-6816
- https://www.cve.org/CVERecord?id=CVE-2016-6816
- https://nvd.nist.gov/vuln/detail/CVE-2016-6816
- https://access.redhat.com/articles/2991951
- https://access.redhat.com/solutions/2891171
- https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.48
- https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.73
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.39
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.8
- https://access.redhat.com/security/cve/CVE-2016-7061
- https://www.cve.org/CVERecord?id=CVE-2016-7061
- https://nvd.nist.gov/vuln/detail/CVE-2016-7061
- https://access.redhat.com/security/cve/CVE-2016-8627
- https://www.cve.org/CVERecord?id=CVE-2016-8627
- https://nvd.nist.gov/vuln/detail/CVE-2016-8627
- https://access.redhat.com/security/cve/CVE-2016-8656
- https://www.cve.org/CVERecord?id=CVE-2016-8656
- https://nvd.nist.gov/vuln/detail/CVE-2016-8656
Affected packages
Red Hat:jboss_enterprise_application_platform:6::el5 / apache-cxf
Package
- Name
- apache-cxf
- Purl
- pkg:rpm/redhat/apache-cxf
Red Hat:jboss_enterprise_application_platform:6::el5 / hornetq
Package
- Name
- hornetq
- Purl
- pkg:rpm/redhat/hornetq
Red Hat:jboss_enterprise_application_platform:6::el5 / infinispan
Package
- Name
- infinispan
- Purl
- pkg:rpm/redhat/infinispan
Red Hat:jboss_enterprise_application_platform:6::el5 / infinispan-cachestore-jdbc
Package
- Name
- infinispan-cachestore-jdbc
- Purl
- pkg:rpm/redhat/infinispan-cachestore-jdbc
Red Hat:jboss_enterprise_application_platform:6::el5 / infinispan-cachestore-remote
Package
- Name
- infinispan-cachestore-remote
- Purl
- pkg:rpm/redhat/infinispan-cachestore-remote
Red Hat:jboss_enterprise_application_platform:6::el5 / infinispan-client-hotrod
Package
- Name
- infinispan-client-hotrod
- Purl
- pkg:rpm/redhat/infinispan-client-hotrod
Red Hat:jboss_enterprise_application_platform:6::el5 / infinispan-core
Package
- Name
- infinispan-core
- Purl
- pkg:rpm/redhat/infinispan-core
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-appclient
Package
- Name
- jboss-as-appclient
- Purl
- pkg:rpm/redhat/jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-cli
Package
- Name
- jboss-as-cli
- Purl
- pkg:rpm/redhat/jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-client-all
Package
- Name
- jboss-as-client-all
- Purl
- pkg:rpm/redhat/jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-clustering
Package
- Name
- jboss-as-clustering
- Purl
- pkg:rpm/redhat/jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-cmp
Package
- Name
- jboss-as-cmp
- Purl
- pkg:rpm/redhat/jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-configadmin
Package
- Name
- jboss-as-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-connector
Package
- Name
- jboss-as-connector
- Purl
- pkg:rpm/redhat/jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-console
Package
- Name
- jboss-as-console
- Purl
- pkg:rpm/redhat/jboss-as-console
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-controller
Package
- Name
- jboss-as-controller
- Purl
- pkg:rpm/redhat/jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-controller-client
Package
- Name
- jboss-as-controller-client
- Purl
- pkg:rpm/redhat/jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-core-security
Package
- Name
- jboss-as-core-security
- Purl
- pkg:rpm/redhat/jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-deployment-repository
Package
- Name
- jboss-as-deployment-repository
- Purl
- pkg:rpm/redhat/jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-deployment-scanner
Package
- Name
- jboss-as-deployment-scanner
- Purl
- pkg:rpm/redhat/jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-domain-http
Package
- Name
- jboss-as-domain-http
- Purl
- pkg:rpm/redhat/jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-domain-management
Package
- Name
- jboss-as-domain-management
- Purl
- pkg:rpm/redhat/jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ee
Package
- Name
- jboss-as-ee
- Purl
- pkg:rpm/redhat/jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ee-deployment
Package
- Name
- jboss-as-ee-deployment
- Purl
- pkg:rpm/redhat/jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-ejb3
Package
- Name
- jboss-as-ejb3
- Purl
- pkg:rpm/redhat/jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-embedded
Package
- Name
- jboss-as-embedded
- Purl
- pkg:rpm/redhat/jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-host-controller
Package
- Name
- jboss-as-host-controller
- Purl
- pkg:rpm/redhat/jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jacorb
Package
- Name
- jboss-as-jacorb
- Purl
- pkg:rpm/redhat/jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jaxr
Package
- Name
- jboss-as-jaxr
- Purl
- pkg:rpm/redhat/jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jaxrs
Package
- Name
- jboss-as-jaxrs
- Purl
- pkg:rpm/redhat/jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jdr
Package
- Name
- jboss-as-jdr
- Purl
- pkg:rpm/redhat/jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jmx
Package
- Name
- jboss-as-jmx
- Purl
- pkg:rpm/redhat/jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jpa
Package
- Name
- jboss-as-jpa
- Purl
- pkg:rpm/redhat/jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jsf
Package
- Name
- jboss-as-jsf
- Purl
- pkg:rpm/redhat/jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-jsr77
Package
- Name
- jboss-as-jsr77
- Purl
- pkg:rpm/redhat/jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-logging
Package
- Name
- jboss-as-logging
- Purl
- pkg:rpm/redhat/jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-mail
Package
- Name
- jboss-as-mail
- Purl
- pkg:rpm/redhat/jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-management-client-content
Package
- Name
- jboss-as-management-client-content
- Purl
- pkg:rpm/redhat/jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-messaging
Package
- Name
- jboss-as-messaging
- Purl
- pkg:rpm/redhat/jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-modcluster
Package
- Name
- jboss-as-modcluster
- Purl
- pkg:rpm/redhat/jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-naming
Package
- Name
- jboss-as-naming
- Purl
- pkg:rpm/redhat/jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-network
Package
- Name
- jboss-as-network
- Purl
- pkg:rpm/redhat/jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi
Package
- Name
- jboss-as-osgi
- Purl
- pkg:rpm/redhat/jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi-configadmin
Package
- Name
- jboss-as-osgi-configadmin
- Purl
- pkg:rpm/redhat/jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-osgi-service
Package
- Name
- jboss-as-osgi-service
- Purl
- pkg:rpm/redhat/jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-picketlink
Package
- Name
- jboss-as-picketlink
- Purl
- pkg:rpm/redhat/jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-platform-mbean
Package
- Name
- jboss-as-platform-mbean
- Purl
- pkg:rpm/redhat/jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-pojo
Package
- Name
- jboss-as-pojo
- Purl
- pkg:rpm/redhat/jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-process-controller
Package
- Name
- jboss-as-process-controller
- Purl
- pkg:rpm/redhat/jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-protocol
Package
- Name
- jboss-as-protocol
- Purl
- pkg:rpm/redhat/jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-remoting
Package
- Name
- jboss-as-remoting
- Purl
- pkg:rpm/redhat/jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-sar
Package
- Name
- jboss-as-sar
- Purl
- pkg:rpm/redhat/jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-security
Package
- Name
- jboss-as-security
- Purl
- pkg:rpm/redhat/jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-server
Package
- Name
- jboss-as-server
- Purl
- pkg:rpm/redhat/jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-system-jmx
Package
- Name
- jboss-as-system-jmx
- Purl
- pkg:rpm/redhat/jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-threads
Package
- Name
- jboss-as-threads
- Purl
- pkg:rpm/redhat/jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-transactions
Package
- Name
- jboss-as-transactions
- Purl
- pkg:rpm/redhat/jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-version
Package
- Name
- jboss-as-version
- Purl
- pkg:rpm/redhat/jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-web
Package
- Name
- jboss-as-web
- Purl
- pkg:rpm/redhat/jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-webservices
Package
- Name
- jboss-as-webservices
- Purl
- pkg:rpm/redhat/jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-weld
Package
- Name
- jboss-as-weld
- Purl
- pkg:rpm/redhat/jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-as-xts
Package
- Name
- jboss-as-xts
- Purl
- pkg:rpm/redhat/jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-ejb-client
Package
- Name
- jboss-ejb-client
- Purl
- pkg:rpm/redhat/jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:6::el5 / jboss-hal
Package
- Name
- jboss-hal
- Purl
- pkg:rpm/redhat/jboss-hal
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-appclient
Package
- Name
- jbossas-appclient
- Purl
- pkg:rpm/redhat/jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-bundles
Package
- Name
- jbossas-bundles
- Purl
- pkg:rpm/redhat/jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-core
Package
- Name
- jbossas-core
- Purl
- pkg:rpm/redhat/jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-domain
Package
- Name
- jbossas-domain
- Purl
- pkg:rpm/redhat/jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-javadocs
Package
- Name
- jbossas-javadocs
- Purl
- pkg:rpm/redhat/jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-modules-eap
Package
- Name
- jbossas-modules-eap
- Purl
- pkg:rpm/redhat/jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-product-eap
Package
- Name
- jbossas-product-eap
- Purl
- pkg:rpm/redhat/jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-standalone
Package
- Name
- jbossas-standalone
- Purl
- pkg:rpm/redhat/jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossas-welcome-content-eap
Package
- Name
- jbossas-welcome-content-eap
- Purl
- pkg:rpm/redhat/jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el5 / jbossweb
Package
- Name
- jbossweb
- Purl
- pkg:rpm/redhat/jbossweb