RHEL 9：Red Hat JBoss Enterprise Application Platform 8.0.2 安全更新（中危）(RHSA-2024:3581)

漏洞信息

CPE: p-cpe:/a:redhat:enterprise_linux:eap8-fge-msg-simple, p-cpe:/a:redhat:enterprise_linux:eap8-apache-commons-codec, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-transaction-api, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-restat-api, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-common-api, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-jaxrs-json-provider, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-selector, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-queryparser, p-cpe:/a:redhat:enterprise_linux:eap8-jgroups-kubernetes, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-core, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search, p-cpe:/a:redhat:enterprise_linux:eap8-velocity-engine-core, p-cpe:/a:redhat:enterprise_linux:eap8-fge-btf, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-client-hotrod-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-netty-buffer, cpe:/o:redhat:enterprise_linux:9, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-modules, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-analyzers-common, p-cpe:/a:redhat:enterprise_linux:eap8-velocity, p-cpe:/a:redhat:enterprise_linux:eap8-httpcomponents-asyncclient, p-cpe:/a:redhat:enterprise_linux:eap8-jgroups, p-cpe:/a:redhat:enterprise_linux:eap8-apache-cxf, p-cpe:/a:redhat:enterprise_linux:eap8-antlr4, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-crypto, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-http-naming-client, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-jdbc-store, p-cpe:/a:redhat:enterprise_linux:eap8-httpcomponents-client, p-cpe:/a:redhat:enterprise_linux:eap8-netty-transport, p-cpe:/a:redhat:enterprise_linux:eap8-rngom, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-jaxrs-providers, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-hqclient-protocol, p-cpe:/a:redhat:enterprise_linux:eap8-jberet, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-core-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-jaxrs-base, p-cpe:/a:redhat:enterprise_linux:eap8-netty-transport-native-unix-common, p-cpe:/a:redhat:enterprise_linux:eap8-atinject, p-cpe:/a:redhat:enterprise_linux:eap8-jboss-modules, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-hibernate-cache-v62, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-common-impl, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-core-api, p-cpe:/a:redhat:enterprise_linux:eap8-insights-java-client, p-cpe:/a:redhat:enterprise_linux:eap8-netty-transport-classes-epoll, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-modules-base, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-http-ejb-client, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-annotation-api, p-cpe:/a:redhat:enterprise_linux:eap8-netty-common, p-cpe:/a:redhat:enterprise_linux:eap8-txw2, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-ws-security-stax, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-servlet-api, p-cpe:/a:redhat:enterprise_linux:eap8-apache-commons-io, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-http-client-common, p-cpe:/a:redhat:enterprise_linux:eap8-angus, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-json-api, p-cpe:/a:redhat:enterprise_linux:eap8-apache-sshd, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-validator, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cachestore-remote, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-deployers-common, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-hibernate-cache-spi, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-query-dsl, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-jms-api, p-cpe:/a:redhat:enterprise_linux:eap8-netty-codec, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-modules-java8, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-http-transaction-client, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-atom-provider, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-dataformat-cbor, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-validation-api, p-cpe:/a:redhat:enterprise_linux:eap8-netty-handler-proxy, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-json-binding-provider, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-util-common, p-cpe:/a:redhat:enterprise_linux:eap8-wsdl4j, p-cpe:/a:redhat:enterprise_linux:eap8-jberet-core, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-common-spi, p-cpe:/a:redhat:enterprise_linux:eap8-protostream, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-component-annotations, p-cpe:/a:redhat:enterprise_linux:eap8-reactive-streams, p-cpe:/a:redhat:enterprise_linux:eap8-slf4j-api, p-cpe:/a:redhat:enterprise_linux:eap8-java-classmate, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-validator-provider, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-elytron, p-cpe:/a:redhat:enterprise_linux:eap8-netty-codec-dns, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-jts-idlj, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-ws-security-dom, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-journal, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-server, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-hornetq-protocol, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-jbossxts, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy, p-cpe:/a:redhat:enterprise_linux:eap8-angus-activation, p-cpe:/a:redhat:enterprise_linux:eap8-amazon-ion-java, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar, p-cpe:/a:redhat:enterprise_linux:eap8-httpcomponents-core, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-jakarta-server, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-join, p-cpe:/a:redhat:enterprise_linux:eap8-woodstox-core, p-cpe:/a:redhat:enterprise_linux:eap8-yasson, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-jbosstxbridge, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-validator, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-jsapi, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-backend-lucene, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-core, p-cpe:/a:redhat:enterprise_linux:eap8-jaxb-core, p-cpe:/a:redhat:enterprise_linux:eap8-joda-time, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-json, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-jakarta-client, p-cpe:/a:redhat:enterprise_linux:eap8-narayana, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-restat-bridge, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-dto, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-queries, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-multipart-provider, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-facet, p-cpe:/a:redhat:enterprise_linux:eap8-netty-codec-socks, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cdi-remote-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-jackson2-provider, p-cpe:/a:redhat:enterprise_linux:eap8-angus-mail, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-jts-integration, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-java-jdk17, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-datatype-jsr310, p-cpe:/a:redhat:enterprise_linux:eap8-snakeyaml, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-rxjava2, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-mail, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-jakarta-ra, p-cpe:/a:redhat:enterprise_linux:eap8-antlr4-runtime, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-query, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-envers, p-cpe:/a:redhat:enterprise_linux:eap8-istack-commons-tools, p-cpe:/a:redhat:enterprise_linux:eap8-apache-cxf-rt, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-client-api, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-cli, p-cpe:/a:redhat:enterprise_linux:eap8-apache-cxf-tools, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-databind, p-cpe:/a:redhat:enterprise_linux:eap8-elytron-web, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-jdbc, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-solr, p-cpe:/a:redhat:enterprise_linux:eap8-guava, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-clustered-counter, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-ws-rs-api, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-java-jdk11, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-datatype-jdk8, p-cpe:/a:redhat:enterprise_linux:eap8-caffeine, p-cpe:/a:redhat:enterprise_linux:eap8-hal-console, p-cpe:/a:redhat:enterprise_linux:eap8-ironjacamar-core-impl, p-cpe:/a:redhat:enterprise_linux:eap8-netty-resolver-dns, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-bindings, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-mapper-orm-orm6, p-cpe:/a:redhat:enterprise_linux:eap8-jaxb-runtime, p-cpe:/a:redhat:enterprise_linux:eap8-jaxb-xjc, p-cpe:/a:redhat:enterprise_linux:eap8-istack-commons-runtime, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-jakarta-service-extensions, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-objectfilter, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-restat-util, p-cpe:/a:redhat:enterprise_linux:eap8-codemodel, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-commons, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-remote-query-client, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-interceptor-api, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-xml-bind-api, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-batch-api, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-hibernate-cache-commons, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-client, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-http-client, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-core, p-cpe:/a:redhat:enterprise_linux:eap8-sun-istack-commons, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-transaction-client, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-annotations, p-cpe:/a:redhat:enterprise_linux:eap8-relaxng-datatype, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-backend-elasticsearch, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-core-spi, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-mapper-pojo-base, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-ws-security-common, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-json-p-provider, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-module-jakarta-xmlbind-annotations, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-cdi, p-cpe:/a:redhat:enterprise_linux:eap8-jasypt, p-cpe:/a:redhat:enterprise_linux:eap8-log4j2-jboss-logmanager, p-cpe:/a:redhat:enterprise_linux:eap8-jboss-ejb-client, p-cpe:/a:redhat:enterprise_linux:eap8-stax2-api, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cdi-embedded-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-netty-resolver, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cachestore-jdbc-common-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-slf4j, p-cpe:/a:redhat:enterprise_linux:eap8-xsom, p-cpe:/a:redhat:enterprise_linux:eap8-ws-commons-xmlschema, p-cpe:/a:redhat:enterprise_linux:eap8-guava-failureaccess, p-cpe:/a:redhat:enterprise_linux:eap8-guava-libraries, p-cpe:/a:redhat:enterprise_linux:eap8-jakarta-activation, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-commons-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-jaxb-jxc, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-clustered-lock, p-cpe:/a:redhat:enterprise_linux:eap8-jboss-cert-helper, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-search-engine, p-cpe:/a:redhat:enterprise_linux:eap8-apache-commons-beanutils, p-cpe:/a:redhat:enterprise_linux:eap8-javaee-jpa-spec, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-ws-security-policy-stax, p-cpe:/a:redhat:enterprise_linux:eap8-netty, p-cpe:/a:redhat:enterprise_linux:eap8-netty-handler, p-cpe:/a:redhat:enterprise_linux:eap8-activemq-artemis-core-client, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cdi-common-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-hibernate-validator-cdi, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-query-core, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan-cachestore-jdbc-jakarta, p-cpe:/a:redhat:enterprise_linux:eap8-narayana-restat-integration, p-cpe:/a:redhat:enterprise_linux:eap8-apache-cxf-services, p-cpe:/a:redhat:enterprise_linux:eap8-jaxb, p-cpe:/a:redhat:enterprise_linux:eap8-infinispan, p-cpe:/a:redhat:enterprise_linux:eap8-netty-codec-http, p-cpe:/a:redhat:enterprise_linux:eap8-resteasy-jaxb-provider, p-cpe:/a:redhat:enterprise_linux:eap8-gson, p-cpe:/a:redhat:enterprise_linux:eap8-wildfly-elytron-tool, p-cpe:/a:redhat:enterprise_linux:eap8-jackson-dataformats-binary, p-cpe:/a:redhat:enterprise_linux:eap8-jose4j, p-cpe:/a:redhat:enterprise_linux:eap8-wss4j-policy, p-cpe:/a:redhat:enterprise_linux:eap8-netty-transport-native-epoll, p-cpe:/a:redhat:enterprise_linux:eap8-lucene-core

必需的 KB 项: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

参考资料信息

CVE: CVE-2023-4503, CVE-2023-6236, CVE-2024-1102, CVE-2024-1233