{"id":"RHSA-2009:1146","summary":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP05 update","modified":"2025-11-22T10:21:33Z","published":"2024-09-15T17:56:52Z","upstream":["CVE-2008-5515","CVE-2009-0580","CVE-2009-0783"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2009:1146"},{"type":"ARTICLE","url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp05/html-single/Release_Notes/index.html"},{"type":"ARTICLE","url":"http://www.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=499608"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=503978"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=504153"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=504753"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1146.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2008-5515"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2008-5515"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5515"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2009-0580"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2009-0580"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0580"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2009-0783"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2009-0783"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0783"}],"affected":[{"package":{"name":"glassfish-jaxb","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/glassfish-jaxb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.11.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"glassfish-jaxb-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/glassfish-jaxb-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.11.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-annotations","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-annotations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-1.10.GA_CP01.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-annotations-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-annotations-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-1.10.GA_CP01.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-commons-annotations","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-commons-annotations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-1jpp.ep1.5.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-commons-annotations-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-commons-annotations-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-1jpp.ep1.5.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-entitymanager","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-entitymanager"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-2.4.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-entitymanager-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-entitymanager-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-2.4.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-validator","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-validator"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-1jpp.ep1.8.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hibernate3-validator-javadoc","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hibernate3-validator-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-1jpp.ep1.8.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"hsqldb","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/hsqldb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8-2.patch02.1jpp.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jakarta-slide-webdavclient","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jakarta-slide-webdavclient"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-9.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jboss-cache","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jboss-cache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.SP13.1.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jboss-messaging","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jboss-messaging"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.SP3_CP08.1.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jboss-remoting","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jboss-remoting"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jboss-seam","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jboss-seam"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jboss-seam-docs","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jboss-seam-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossas","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossas"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP05.6.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossas-4.3.0.GA_CP05-bin","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossas-4.3.0.GA_CP05-bin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP05.6.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossas-client","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossas-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP05.6.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossts","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossweb","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossweb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-6.CP11.0jpp.ep1.1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossws","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossws"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.SP2_CP06.3.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossws-common","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossws-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.GA_CP04.1.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossws-framework","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossws-framework"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.GA_CP04.2.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossws-native42","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossws-native42"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.SP2_CP06.3.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jbossws-spi","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jbossws-spi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.GA_CP02.1.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"jgroups","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/jgroups"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-1.ep1.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"rh-eap-docs","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/rh-eap-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-5.GA_CP05.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"rh-eap-docs-examples","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/rh-eap-docs-examples"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-5.GA_CP05.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}},{"package":{"name":"xerces-j2","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","purl":"pkg:rpm/redhat/xerces-j2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9jpp.ep1.2.el4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2009:1146.json"}}],"schema_version":"1.7.3"}