Read the docs
Red Hat Security Advisory

RHSA-2024:1192

Red Hat JBoss Enterprise Application Platform 8.0.1 security update

Released 2024-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2023-04387 CVE-2023-4759 · GHSA-3p86-9955-h393

Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

Priority MEDIUM 44

Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02194 Published 2023-09-12 Partial fix · 5.13.3.202401111512-r, 6.6.1.202309021850-r +1 CWE-178
TI-2023-03751 CVE-2023-4043 · GHSA-g8p6-p27c-52fx

Parsson DoS when parsing numbers from untrusted sources

Priority LOW 35

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-11-03 Partial fix · 1.0.5, 1.1.4 CWE-20