RHSA-2011:0350High
Red Hat Security Advisory: tomcat5 and tomcat6 security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2010-4476 — JDK Double.parseDouble Denial-Of-Service CVE-2011-0534 — tomcat: remote DoS via NIO connector
🎯 Affected products1
- Red Hat JBoss Web Server 1.0
✅ Remediation
The References section of this erratum contains a patch download link (you must log in to download the patch). Before applying the patch, backup your existing JBoss Enterprise Web Server installation (including all applications and configuration files). After applying the patch, the JBoss server process must be restarted for the update to take effect.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2011:0350
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://tomcat.apache.org/security-5.html
- externalhttp://tomcat.apache.org/security-6.html
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&downloadType=securityPatches&version=1.0.1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=674336
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=675338
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0350.json