RHSA-2017:0455

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2017:0455

Import Source

https://security.access.redhat.com/data/osv/RHSA-2017:0455.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2017:0455

Related

Published

2024-09-29T17:09:22Z

Modified

2024-12-16T10:02:31Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update

Details

References

Affected packages

Red Hat:jboss_enterprise_web_server:3.1::el6 / hibernate4-c3p0-eap6

Package

Name: hibernate4-c3p0-eap6
Purl: pkg:rpm/redhat/hibernate4-c3p0-eap6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:4.2.23-1.Final_redhat_1.1.ep6.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / hibernate4-core-eap6

Package

Name: hibernate4-core-eap6
Purl: pkg:rpm/redhat/hibernate4-core-eap6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:4.2.23-1.Final_redhat_1.1.ep6.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / hibernate4-eap6

Package

Name: hibernate4-eap6
Purl: pkg:rpm/redhat/hibernate4-eap6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:4.2.23-1.Final_redhat_1.1.ep6.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / hibernate4-entitymanager-eap6

Package

Name: hibernate4-entitymanager-eap6
Purl: pkg:rpm/redhat/hibernate4-entitymanager-eap6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:4.2.23-1.Final_redhat_1.1.ep6.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / hibernate4-envers-eap6

Package

Name: hibernate4-envers-eap6
Purl: pkg:rpm/redhat/hibernate4-envers-eap6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:4.2.23-1.Final_redhat_1.1.ep6.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / jbcs-httpd24-apache-commons-daemon

Package

Name: jbcs-httpd24-apache-commons-daemon
Purl: pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.0.15-1.redhat_2.1.jbcs.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / jbcs-httpd24-apache-commons-daemon-jsvc

Package

Name: jbcs-httpd24-apache-commons-daemon-jsvc
Purl: pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.0.15-17.redhat_2.jbcs.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo

Package

Name: jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.0.15-17.redhat_2.jbcs.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / jbcs-httpd24-runtime

Package

Name: jbcs-httpd24-runtime
Purl: pkg:rpm/redhat/jbcs-httpd24-runtime

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1-3.jbcs.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / mod_cluster

Package

Name: mod_cluster
Purl: pkg:rpm/redhat/mod_cluster

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.5-2.Final_redhat_2.1.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / mod_cluster-tomcat7

Package

Name: mod_cluster-tomcat7
Purl: pkg:rpm/redhat/mod_cluster-tomcat7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.5-2.Final_redhat_2.1.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / mod_cluster-tomcat8

Package

Name: mod_cluster-tomcat8
Purl: pkg:rpm/redhat/mod_cluster-tomcat8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.5-2.Final_redhat_2.1.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat-native

Package

Name: tomcat-native
Purl: pkg:rpm/redhat/tomcat-native

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.8-9.redhat_9.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat-native-debuginfo

Package

Name: tomcat-native-debuginfo
Purl: pkg:rpm/redhat/tomcat-native-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.8-9.redhat_9.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat-vault

Package

Name: tomcat-vault
Purl: pkg:rpm/redhat/tomcat-vault

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.0.8-9.Final_redhat_2.1.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7

Package

Name: tomcat7
Purl: pkg:rpm/redhat/tomcat7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-admin-webapps

Package

Name: tomcat7-admin-webapps
Purl: pkg:rpm/redhat/tomcat7-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-docs-webapp

Package

Name: tomcat7-docs-webapp
Purl: pkg:rpm/redhat/tomcat7-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-el-2.2-api

Package

Name: tomcat7-el-2.2-api
Purl: pkg:rpm/redhat/tomcat7-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-javadoc

Package

Name: tomcat7-javadoc
Purl: pkg:rpm/redhat/tomcat7-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-jsp-2.2-api

Package

Name: tomcat7-jsp-2.2-api
Purl: pkg:rpm/redhat/tomcat7-jsp-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-jsvc

Package

Name: tomcat7-jsvc
Purl: pkg:rpm/redhat/tomcat7-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-lib

Package

Name: tomcat7-lib
Purl: pkg:rpm/redhat/tomcat7-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-log4j

Package

Name: tomcat7-log4j
Purl: pkg:rpm/redhat/tomcat7-log4j

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-selinux

Package

Name: tomcat7-selinux
Purl: pkg:rpm/redhat/tomcat7-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-servlet-3.0-api

Package

Name: tomcat7-servlet-3.0-api
Purl: pkg:rpm/redhat/tomcat7-servlet-3.0-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat7-webapps

Package

Name: tomcat7-webapps
Purl: pkg:rpm/redhat/tomcat7-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.70-16.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8

Package

Name: tomcat8
Purl: pkg:rpm/redhat/tomcat8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-admin-webapps

Package

Name: tomcat8-admin-webapps
Purl: pkg:rpm/redhat/tomcat8-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-docs-webapp

Package

Name: tomcat8-docs-webapp
Purl: pkg:rpm/redhat/tomcat8-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-el-2.2-api

Package

Name: tomcat8-el-2.2-api
Purl: pkg:rpm/redhat/tomcat8-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-javadoc

Package

Name: tomcat8-javadoc
Purl: pkg:rpm/redhat/tomcat8-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-jsp-2.3-api

Package

Name: tomcat8-jsp-2.3-api
Purl: pkg:rpm/redhat/tomcat8-jsp-2.3-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-jsvc

Package

Name: tomcat8-jsvc
Purl: pkg:rpm/redhat/tomcat8-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-lib

Package

Name: tomcat8-lib
Purl: pkg:rpm/redhat/tomcat8-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-log4j

Package

Name: tomcat8-log4j
Purl: pkg:rpm/redhat/tomcat8-log4j

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-selinux

Package

Name: tomcat8-selinux
Purl: pkg:rpm/redhat/tomcat8-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-servlet-3.1-api

Package

Name: tomcat8-servlet-3.1-api
Purl: pkg:rpm/redhat/tomcat8-servlet-3.1-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6

Red Hat:jboss_enterprise_web_server:3.1::el6 / tomcat8-webapps

Package

Name: tomcat8-webapps
Purl: pkg:rpm/redhat/tomcat8-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:8.0.36-17.ep7.el6