9 Replies Latest reply on Jul 4, 2013 2:39 PM by wdfink

Security Updates for JBoss 4.0.4 GA

palm Jun 26, 2013 5:21 AM

I have a server with JBoss 4.0.4 GA.

I have get this security warning http://www.securityfocus.com/bid/45148 .

Now I'm looking for updates, but I didn't find some.

Where can I find this updates?

1. Re: Security Updates for JBoss 4.0.4 GA

wdfink Jun 26, 2013 10:50 AM (in response to palm)

The security warning is about EAP releases where you need a subscription for updates.

For such old version 4.0 there is no EAP release and I think there will be no updates as this versions has reached EOL
1 of 1 people found this helpful
Actions
2. Re: Security Updates for JBoss 4.0.4 GA

palm Jun 27, 2013 4:35 AM (in response to wdfink)

And from which version can I get current updates ?
Actions
3. Re: Security Updates for JBoss 4.0.4 GA

wdfink Jun 27, 2013 11:25 AM (in response to palm)

You need to use the latest community edition to have the latest patches.

Security patches or bugfixes are provided for EAP versions, here you need to have a subscription. The policy is described here.
The EAP4 versions are EOL and only supported if you have an ExtendedLifeSupport enabled.
For EAP5 you will have still support.
Actions
4. Re: Security Updates for JBoss 4.0.4 GA

palm Jul 2, 2013 4:28 AM (in response to wdfink)

But where I can find EAP5?
I only found EAP 6.1.0.
Actions
5. Re: Security Updates for JBoss 4.0.4 GA

palm Jul 3, 2013 6:22 AM (in response to wdfink)

I need only the JBoss Application Server. We have version 4.0.4 and I need a newer version (see first question).

Is there a difference Between JBoss Application Server (AS) and JBoss Enterprise Application Platform (EAP)?
Actions
6. Re: Security Updates for JBoss 4.0.4 GA

wdfink Jul 3, 2013 9:03 AM (in response to palm)

Yes,
AS is the community version, free for use without any charge.
EAP is the Enterprise version, you need a subscription to run that in production.
The EAP versions are available with a subscripton login from the 'Customer support portal'.
Starting with EAP6.1 the same bits are available from the community download page, but you are not free to use in production (see several discussions)
Only EAP6.1.0.Alpha is free as this are the same bits as AS7.2.0 (release tag in github).
Actions
7. Re: Security Updates for JBoss 4.0.4 GA

wdfink Jul 3, 2013 9:10 AM (in response to palm)

Also this might help

http://www.redhat.com/products/jbossenterprisemiddleware/community-enterprise/
Actions
8. Re: Security Updates for JBoss 4.0.4 GA

palm Jul 4, 2013 2:24 AM (in response to wdfink)

Can I find in the 'Customer support portal' also a version for EAP5 where I have still support?
If so, which version is the corresponding AS version, so I can test it before.
Actions
9. Re: Security Updates for JBoss 4.0.4 GA

wdfink Jul 4, 2013 2:39 PM (in response to palm)

you might have a look to this page for policies https://access.redhat.com/support/policy/updates/jboss_notes/
you will se the different levels of support for each version.

The CSP will have downloads for all versions, including the EOL versions.
The latest AS5.x will be near to EAP5.2 so you can test whether this version fits for you.
Actions

Go to original post