Red Hat Security Advisory

RHSA-2020:5175

Red Hat JBoss Enterprise Application Platform 7.3 security update

Released 2020-11-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.3 for BaseOS-8 eap7-hibernate-5.3.18-2.Final_redhat_00002.1.el8eap, eap7-hibernate-core-5.3.18-2.Final_redhat_00002.1.el8eap, eap7-hibernate-entitymanager-5.3.18-2.Final_redhat_00002.1.el8eap +2
Red Hat JBoss EAP 7.3 for RHEL 6 Server eap7-hibernate-5.3.18-2.Final_redhat_00002.1.el6eap, eap7-hibernate-core-5.3.18-2.Final_redhat_00002.1.el6eap, eap7-hibernate-entitymanager-5.3.18-2.Final_redhat_00002.1.el6eap +2
Red Hat JBoss EAP 7.3 for RHEL 7 Server eap7-hibernate-5.3.18-2.Final_redhat_00002.1.el7eap, eap7-hibernate-core-5.3.18-2.Final_redhat_00002.1.el7eap, eap7-hibernate-entitymanager-5.3.18-2.Final_redhat_00002.1.el7eap +2

TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89