RedHat: RHSA-2023-0164:01 Important: Red Hat JBoss Enterprise Appli...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Important: Red Hat JBoss Enterprise Application Platform 7.4 security update
Advisory ID:       RHSA-2023:0164-01
Product:           Red Hat JBoss Enterprise Application Platform
Advisory URL:      https://access.redhat.com/errata/RHSA-2023:0164
Issue date:        2023-01-12
CVE Names:         CVE-2022-46364 
=====================================================================

1. Summary:

A security update is now available for Red Hat JBoss Enterprise Application
Platform 7.4.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Description:

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java
applications based on the WildFly application runtime.

This asynchronous patch is a security update for Red Hat JBoss Enterprise
Application Platform 7.4.

Security Fix(es):

* CXF: Apache CXF: SSRF Vulnerability (CVE-2022-46364)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

3. Solution:

Before applying this update, back up your existing Red Hat JBoss Enterprise
Application Platform installation and deployed applications.

The References section of this erratum contains a download link (you must
log in to download the update).

4. Bugs fixed (https://bugzilla.redhat.com/):

2155682 - CVE-2022-46364 Apache CXF: SSRF Vulnerability

5. References:

https://access.redhat.com/security/cve/CVE-2022-46364
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=7.4
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/

6. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=3vHd
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2023-0164:01 Important: Red Hat JBoss Enterprise Application

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4

Summary

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.
This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.
Security Fix(es):
* CXF: Apache CXF: SSRF Vulnerability (CVE-2022-46364)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, back up your existing Red Hat JBoss EnterpriseApplication Platform installation and deployed applications.The References section of this erratum contains a download link (you mustlog in to download the update).

References

https://access.redhat.com/security/cve/CVE-2022-46364 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=appplatform&version=7.4 https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/ https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/

Package List

Severity
Advisory ID: RHSA-2023:0164-01
Product: Red Hat JBoss Enterprise Application Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2023:0164
Issued Date: : 2023-01-12
CVE Names: CVE-2022-46364

Topic

A security update is now available for Red Hat JBoss Enterprise ApplicationPlatform 7.4.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Relevant Releases Architectures

Bugs Fixed

2155682 - CVE-2022-46364 Apache CXF: SSRF Vulnerability

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.