🛡️ RHSA-2009:1649 — glassfish-jaxb (CVE-2009-0217 +4 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update

Affected software

RHSA-2009:1649 is recorded against 34 packages.

glassfish-jaxb (fixed in 0:2.1.4-1.12.patch03.1.ep1.el5)
glassfish-jaxb-javadoc (fixed in 0:2.1.4-1.12.patch03.1.ep1.el5)
glassfish-jsf (fixed in 0:1.2_13-2.1.ep1.el5)
hibernate3 (fixed in 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5)
hibernate3-annotations (fixed in 0:3.3.1-1.11GA_CP02.ep1.el5)
hibernate3-annotations-javadoc (fixed in 0:3.3.1-1.11GA_CP02.ep1.el5)
hibernate3-entitymanager (fixed in 0:3.3.2-2.5.1.ep1.el5)
hibernate3-entitymanager-javadoc (fixed in 0:3.3.2-2.5.1.ep1.el5)
hibernate3-javadoc (fixed in 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5)
jacorb (fixed in 0:2.3.0-1jpp.ep1.9.1.el5)
jboss-aop (fixed in 0:1.5.5-3.CP04.2.ep1.el5)
jboss-common (fixed in 0:1.2.1-0jpp.ep1.3.el5.1)
jboss-messaging (fixed in 0:1.4.0-3.SP3_CP09.4.ep1.el5)
jboss-remoting (fixed in 0:2.2.3-3.SP1.ep1.el5)
jboss-seam (fixed in 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1)
jboss-seam-docs (fixed in 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1)
jboss-seam2 (fixed in 0:2.0.2.FP-1.ep1.18.el5)
jboss-seam2-docs (fixed in 0:2.0.2.FP-1.ep1.18.el5)
jbossas (fixed in 0:4.3.0-6.GA_CP07.4.2.ep1.el5)
jbossas-4.3.0.ga-cp07-bin (fixed in 0:4.3.0-6.GA_CP07.4.2.ep1.el5)
jbossas-client (fixed in 0:4.3.0-6.GA_CP07.4.2.ep1.el5)
jbossts (fixed in 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5)
jbossweb (fixed in 0:2.0.0-6.CP12.0jpp.ep1.2.el5)
jbossws (fixed in 0:2.0.1-4.SP2_CP07.2.1.ep1.el5)

Show the remaining 10 packages

jbossws-common (fixed in 0:1.0.0-2.GA_CP05.1.ep1.el5)
jbossws-framework (fixed in 0:2.0.1-1.GA_CP05.1.ep1.el5)
jbossws-native42 (fixed in 0:2.0.1-4.SP2_CP07.2.1.ep1.el5)
jcommon (fixed in 0:1.0.16-1.1.ep1.el5)
jfreechart (fixed in 0:1.0.13-2.3.1.ep1.el5)
jgroups (fixed in 1:2.4.7-1.ep1.el5)
quartz (fixed in 0:1.5.2-1jpp.patch01.ep1.4.1.el5)
rh-eap-docs (fixed in 0:4.3.0-6.GA_CP07.ep1.3.el5)
rh-eap-docs-examples (fixed in 0:4.3.0-6.GA_CP07.ep1.3.el5)
xml-security (fixed in 0:1.3.0-1.3.patch01.ep1.2.1.el5)

Timeline and source

Published on 29 September 2024 and last revised on 29 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

glassfish-jaxb has other advisories on record. If you are patching this one, these are worth checking on the same host:

RHSA-2026:44066 (published 23 Jul 2026)
RHSA-2026:44062 (published 23 Jul 2026)
RHSA-2026:44061 (published 23 Jul 2026)
RHSA-2026:43218 (published 23 Jul 2026)
RLSA-2026:43218 (published 22 Jul 2026)
RHSA-2026:2725 (published 17 Feb 2026)
RHSA-2026:2724 (published 17 Feb 2026)
RHSA-2026:2726 (published 17 Feb 2026)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-09-29

Updated 2026-08-20

Modified 2026-06-29

Fix URL N/A

Affected Packages

Software	From version	Fixed in
glassfish-jaxb	—	0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jaxb-javadoc	—	0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jsf	—	0:1.2_13-2.1.ep1.el5
hibernate3	—	1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
hibernate3-annotations	—	0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-annotations-javadoc	—	0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-entitymanager	—	0:3.3.2-2.5.1.ep1.el5
hibernate3-entitymanager-javadoc	—	0:3.3.2-2.5.1.ep1.el5
hibernate3-javadoc	—	1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
jacorb	—	0:2.3.0-1jpp.ep1.9.1.el5
jboss-aop	—	0:1.5.5-3.CP04.2.ep1.el5
jboss-common	—	0:1.2.1-0jpp.ep1.3.el5.1
jboss-messaging	—	0:1.4.0-3.SP3_CP09.4.ep1.el5
jboss-remoting	—	0:2.2.3-3.SP1.ep1.el5
jboss-seam	—	0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam-docs	—	0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam2	—	0:2.0.2.FP-1.ep1.18.el5
jboss-seam2-docs	—	0:2.0.2.FP-1.ep1.18.el5
jbossas	—	0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-4.3.0.ga-cp07-bin	—	0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-client	—	0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossts	—	1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
jbossweb	—	0:2.0.0-6.CP12.0jpp.ep1.2.el5
jbossws	—	0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jbossws-common	—	0:1.0.0-2.GA_CP05.1.ep1.el5
jbossws-framework	—	0:2.0.1-1.GA_CP05.1.ep1.el5
jbossws-native42	—	0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jcommon	—	0:1.0.16-1.1.ep1.el5
jfreechart	—	0:1.0.13-2.3.1.ep1.el5
jgroups	—	1:2.4.7-1.ep1.el5
quartz	—	0:1.5.2-1jpp.patch01.ep1.4.1.el5
rh-eap-docs	—	0:4.3.0-6.GA_CP07.ep1.3.el5
rh-eap-docs-examples	—	0:4.3.0-6.GA_CP07.ep1.3.el5
xml-security	—	0:1.3.0-1.3.patch01.ep1.2.1.el5

References

ADVISORY https://access.redhat.com/errata/RHSA-2009:1649

ARTICLE https://access.redhat.com/security/updates/classification/#moderate

ARTICLE http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=510023

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=511224

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=511915

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=512921

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=532113

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=539495

ADVISORY https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1649.json

REPORT https://access.redhat.com/security/cve/CVE-2009-0217

ADVISORY https://www.cve.org/CVERecord?id=CVE-2009-0217

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2009-0217

REPORT https://access.redhat.com/security/cve/CVE-2009-1380

ADVISORY https://www.cve.org/CVERecord?id=CVE-2009-1380

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2009-1380

REPORT https://access.redhat.com/security/cve/CVE-2009-2405

ADVISORY https://www.cve.org/CVERecord?id=CVE-2009-2405

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2009-2405

REPORT https://access.redhat.com/security/cve/CVE-2009-2625

ADVISORY https://www.cve.org/CVERecord?id=CVE-2009-2625

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2009-2625

REPORT https://access.redhat.com/security/cve/CVE-2009-3554

ADVISORY https://www.cve.org/CVERecord?id=CVE-2009-3554

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2009-3554

🔗 NVD 🔗 Mitre

Similar Threats

Unknown RHSA-2008:0831
Unknown RHSA-2008:0832
Unknown RHSA-2009:1636
Unknown RHSA-2011:1798
Unknown RHSA-2011:1799

Free Vulnerability Check

Is your site affected by RHSA-2009:1649?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against RHSA-2009:1649 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ RHSA-2009:1649 — glassfish-jaxb (CVE-2009-0217 +4 more)

Description

Affected software

Timeline and source

References

Other advisories for this package

Is your site affected by RHSA-2009:1649?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe