RHSA-2023:1185: Important: Red Hat JBoss Enterprise Application Platform 7.4 security update

Q: What is the severity of RHSA-2023:1185?

The severity of RHSA-2023:1185 is classified as a security update addressing a vulnerability in Red Hat JBoss Enterprise Application Platform 7.4.

Q: How do I fix RHSA-2023:1185?

To fix RHSA-2023:1185, you should update to the recommended versions of the affected packages as specified in the advisory.

Q: What vulnerabilities are addressed by RHSA-2023:1185?

RHSA-2023:1185 addresses a vulnerability related to an infinite loop in the undertow component of Red Hat JBoss Enterprise Application Platform 7.

Q: Which packages are affected by RHSA-2023:1185?

The affected packages for RHSA-2023:1185 include eap7-undertow and eap7-wildfly across various versions.

Q: Is RHSA-2023:1185 mandatory to apply?

Yes, applying RHSA-2023:1185 is mandatory as it addresses a critical security vulnerability in the JBoss Enterprise Application Platform.

Published Mar 9, 2023

Updated

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.<br>This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.<br>Security Fix(es):<br><li> undertow: Infinite loop in SslConduit during close (CVE-2023-1108)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

14 affected componentsFixes available

redhat/eap7-undertow<2.2.22-1.SP3_redhat_00002.1.el9ea

2.2.22-1.SP3_redhat_00002.1.el9ea

redhat/eap7-wildfly<7.4.9-6.GA_redhat_00004.1.el9ea

7.4.9-6.GA_redhat_00004.1.el9ea

redhat/eap7-wildfly-javadocs<7.4.9-6.GA_redhat_00004.1.el9ea

7.4.9-6.GA_redhat_00004.1.el9ea

redhat/eap7-wildfly-modules<7.4.9-6.GA_redhat_00004.1.el9ea

7.4.9-6.GA_redhat_00004.1.el9ea

redhat/eap7-undertow<2.2.22-1.SP3_redhat_00002.1.el8ea

2.2.22-1.SP3_redhat_00002.1.el8ea

redhat/eap7-wildfly<7.4.9-6.GA_redhat_00004.1.el8ea

7.4.9-6.GA_redhat_00004.1.el8ea

redhat/eap7-wildfly-javadocs<7.4.9-6.GA_redhat_00004.1.el8ea

7.4.9-6.GA_redhat_00004.1.el8ea

redhat/eap7-wildfly-modules<7.4.9-6.GA_redhat_00004.1.el8ea

7.4.9-6.GA_redhat_00004.1.el8ea

redhat/eap7-undertow<2.2.22-1.SP3_redhat_00002.1.el7ea

2.2.22-1.SP3_redhat_00002.1.el7ea

redhat/eap7-wildfly<7.4.9-6.GA_redhat_00004.1.el7ea