(RHSA-2016:2937) Moderate: Red Hat JBoss BPM Suite security update

This release of Red Hat JBoss BPM Suite 6.3.4 serves as a replacement for Red Hat JBoss BPM Suite 6.3.3, and includes bug fixes and enhancements, which are documented in the Release Notes of the patch linked to in the References section.

Security Fix(es):

• Drools Workbench contains the path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host. (CVE-2016-7041)

Red Hat would like to thank Jonas Bauters (NVISO) for reporting this issue.