Red Hat Product Errata RHSA-2020:2169 - Security Advisory
Issued:
2020-05-14
Updated:
2020-05-14

RHSA-2020:2169 - Security Advisory

Synopsis

Moderate: Red Hat JBoss Enterprise Application Platform 6.4 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.

This asynchronous patch is an update for JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7. All users of Red Hat JBoss Enterprise Application Platform 6.4 are advised to upgrade to this updated package.

Security Fix(es):

  • jboss-cli: JBoss EAP: Vault system property security attribute value is revealed on CLI 'reload' command (CVE-2019-14885)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied. The JBoss server process must be restarted for the update to take effect.

For details about how to apply this update, see:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 6.4 for RHEL 7 x86_64
  • JBoss Enterprise Application Platform 6.4 for RHEL 7 ppc64
  • JBoss Enterprise Application Platform 6.4 for RHEL 6 x86_64
  • JBoss Enterprise Application Platform 6.4 for RHEL 6 ppc64
  • JBoss Enterprise Application Platform 6.4 for RHEL 6 i386
  • JBoss Enterprise Application Platform 6.4 for RHEL 5 x86_64
  • JBoss Enterprise Application Platform 6.4 for RHEL 5 i386
  • JBoss Enterprise Application Platform 6 for RHEL 7 x86_64
  • JBoss Enterprise Application Platform 6 for RHEL 7 ppc64
  • JBoss Enterprise Application Platform 6 for RHEL 6 x86_64
  • JBoss Enterprise Application Platform 6 for RHEL 6 ppc64
  • JBoss Enterprise Application Platform 6 for RHEL 6 i386
  • JBoss Enterprise Application Platform 6 for RHEL 5 x86_64
  • JBoss Enterprise Application Platform 6 for RHEL 5 i386

Fixes

  • BZ - 1770615 - CVE-2019-14885 JBoss EAP: Vault system property security attribute value is revealed on CLI 'reload' command

JBoss Enterprise Application Platform 6.4 for RHEL 7

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: d362b8d55af41405ca0819b437adc6df0569c199fc481bbfff594fd9922b7ff4
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: d04354ac502682686f59ac29850139aee809936035b6732871e386ee4476598e
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: 5371ec13b00572579ce0a768ddbae048487f6b21c1f89724bb7ad4cc110e7458
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: ce918a53134e29dd5608e5fdfb8c1959a09c2d25c1b81f81d2087f3d23a206e7
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 01c54aa91e9e7bef6a6bb0c5ce52c5630456895065cec886f9fcc4a0767d91bf
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 4597c7b0505ea1e0a7b0727fa61f16b3786f32f28af35473de675b9e3c10c909
ppc64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: ce918a53134e29dd5608e5fdfb8c1959a09c2d25c1b81f81d2087f3d23a206e7
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 01c54aa91e9e7bef6a6bb0c5ce52c5630456895065cec886f9fcc4a0767d91bf
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 4597c7b0505ea1e0a7b0727fa61f16b3786f32f28af35473de675b9e3c10c909

JBoss Enterprise Application Platform 6.4 for RHEL 6

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: c835f8b621ab0799edbe273d5eebabbdf0a44f5889e0534c517c3ccf10ba6fa4
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: 11240b7f367c81c3f32acad71da363e5e11d7063bca94344cd5e5ff3753f5efe
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: 6adc9504d022cbbada19396efdf39e742bf6d6548d7f336a61e3b04726f8e766
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2
ppc64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2
i386
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2

JBoss Enterprise Application Platform 6.4 for RHEL 5

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 39ff8b85d8ffa97dd79c24e9278e6863f990be9aa48d77ccd88731f80b449b10
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 72930209284917d8a8dd82afdfb78c241df9b3654d6a75a7a009b01e1bf2bb34
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 1872a79be9e1846437112271a0b74941d787e97c0a1997668d66d3aadb79f193
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: b7465fee78b1483800ca84dbdef34b895e95b823fc351767fbee927aabd9f39b
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: d403c37627c9e71e1c31c7b41a415ff8006bbb26cf916b04b9a6ec584a2e9422
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: 26d0d37d0e3d1ee5d70a6f828b0084373f8dab1c7be28f99cb9d9c030ad38850
i386
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: b7465fee78b1483800ca84dbdef34b895e95b823fc351767fbee927aabd9f39b
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: d403c37627c9e71e1c31c7b41a415ff8006bbb26cf916b04b9a6ec584a2e9422
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: 26d0d37d0e3d1ee5d70a6f828b0084373f8dab1c7be28f99cb9d9c030ad38850

JBoss Enterprise Application Platform 6 for RHEL 7

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: d362b8d55af41405ca0819b437adc6df0569c199fc481bbfff594fd9922b7ff4
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: d04354ac502682686f59ac29850139aee809936035b6732871e386ee4476598e
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.src.rpm SHA-256: 5371ec13b00572579ce0a768ddbae048487f6b21c1f89724bb7ad4cc110e7458
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: ce918a53134e29dd5608e5fdfb8c1959a09c2d25c1b81f81d2087f3d23a206e7
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 01c54aa91e9e7bef6a6bb0c5ce52c5630456895065cec886f9fcc4a0767d91bf
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 4597c7b0505ea1e0a7b0727fa61f16b3786f32f28af35473de675b9e3c10c909
ppc64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: ce918a53134e29dd5608e5fdfb8c1959a09c2d25c1b81f81d2087f3d23a206e7
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 01c54aa91e9e7bef6a6bb0c5ce52c5630456895065cec886f9fcc4a0767d91bf
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el7.noarch.rpm SHA-256: 4597c7b0505ea1e0a7b0727fa61f16b3786f32f28af35473de675b9e3c10c909

JBoss Enterprise Application Platform 6 for RHEL 6

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: c835f8b621ab0799edbe273d5eebabbdf0a44f5889e0534c517c3ccf10ba6fa4
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: 11240b7f367c81c3f32acad71da363e5e11d7063bca94344cd5e5ff3753f5efe
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.src.rpm SHA-256: 6adc9504d022cbbada19396efdf39e742bf6d6548d7f336a61e3b04726f8e766
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2
ppc64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2
i386
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 062ca5fc164adea354515d76595a390a0a484e21f403817377fad6e9543ec2c8
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: 7fbe1a26fcab7627707be794b8958798492e2741070ab1142f88c42e9e5142be
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el6.noarch.rpm SHA-256: a6bb385db726f365366c328d14604c70d3c2d4775018a9ef1578b9574d9e03b2

JBoss Enterprise Application Platform 6 for RHEL 5

SRPM
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 39ff8b85d8ffa97dd79c24e9278e6863f990be9aa48d77ccd88731f80b449b10
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 72930209284917d8a8dd82afdfb78c241df9b3654d6a75a7a009b01e1bf2bb34
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.src.rpm SHA-256: 1872a79be9e1846437112271a0b74941d787e97c0a1997668d66d3aadb79f193
x86_64
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: b7465fee78b1483800ca84dbdef34b895e95b823fc351767fbee927aabd9f39b
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: d403c37627c9e71e1c31c7b41a415ff8006bbb26cf916b04b9a6ec584a2e9422
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: 26d0d37d0e3d1ee5d70a6f828b0084373f8dab1c7be28f99cb9d9c030ad38850
i386
jboss-as-controller-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: b7465fee78b1483800ca84dbdef34b895e95b823fc351767fbee927aabd9f39b
jboss-as-server-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: d403c37627c9e71e1c31c7b41a415ff8006bbb26cf916b04b9a6ec584a2e9422
jboss-as-weld-7.5.22-3.Final_redhat_4.1.ep6.el5.noarch.rpm SHA-256: 26d0d37d0e3d1ee5d70a6f828b0084373f8dab1c7be28f99cb9d9c030ad38850

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.