Security Updates for JBoss 4.0.4 GA

[palm]

I have a server with JBoss 4.0.4 GA. 

I have get this security warning http://www.securityfocus.com/bid/45148 .

Now I'm looking for updates, but I didn't find some.

Where can I find this updates?

[wdfink]

The security warning is about EAP releases where you need a subscription for updates.

For such old version 4.0 there is no EAP release and I think there will be no updates as this versions has reached EOL

[palm]

And from which version can I get current updates ?

[wdfink]

You need to use the latest community edition to have the latest patches.

Security patches or bugfixes are provided for EAP versions, here you need to have a subscription. The policy is described here.

The EAP4 versions are EOL and only supported if you have an ExtendedLifeSupport enabled.

For EAP5 you will have still support.

[palm]

But where I can find EAP5?

I only found EAP 6.1.0.

[palm]

I need only the JBoss Application Server. We have version 4.0.4 and I need a newer version (see first question).

Is there a difference Between JBoss Application Server (AS) and JBoss Enterprise Application Platform (EAP)?

[wdfink]

Yes,

AS is the community version, free for use without any charge.

EAP is the Enterprise version, you need a subscription to run that in production.

The EAP versions are available with a subscripton login from the 'Customer support portal'.

Starting with EAP6.1 the same bits are available from the community download page, but you are not free to use in production (see several discussions)

Only EAP6.1.0.Alpha is free as this are the same bits as AS7.2.0 (release tag in github).

[wdfink]

Also this might help

http://www.redhat.com/products/jbossenterprisemiddleware/community-enterprise/

[palm]

Can I find in the 'Customer support portal' also a version for EAP5 where I have still support?

If so, which version is the corresponding AS version, so I can test it before.

[wdfink]

you might have a look to this page for policies https://access.redhat.com/support/policy/updates/jboss_notes/

you will se the different levels of support for each version.

The CSP will have downloads for all versions, including the EOL versions.

The latest AS5.x will be near to EAP5.2 so you can test whether this version fits for you.