RHSA-2022:0437: Important: Red Hat JBoss Enterprise Application Platform 6.4 security update
Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.This asynchronous patch is an update for JBoss Enterprise Application Platform 6.4. All users of Red Hat JBoss Enterprise Application Platform 6.4 are advised to upgrade to this updated package.Security Fix(es): log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender (CVE-2022-23305) log4j: Unsafe deserialization flaw in Chainsaw log viewer (CVE-2022-23307) log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104) log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink (CVE-2022-23302) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0437?
The severity of RHSA-2022:0437 is classified as important.
What software versions are affected by RHSA-2022:0437?
RHSA-2022:0437 affects the Red Hat JBoss Enterprise Application Platform version 6.4.
How do I fix RHSA-2022:0437?
To fix RHSA-2022:0437, users should apply the provided asynchronous patch to update their JBoss Enterprise Application Platform.
Are there any known issues with RHSA-2022:0437?
There are several known issues associated with RHSA-2022:0437, which can be found in the bug reports linked in the advisory.
What is the purpose of RHSA-2022:0437?
The purpose of RHSA-2022:0437 is to address vulnerabilities in Red Hat JBoss Enterprise Application Platform that could affect application security.