RHSA-2012:0325High

Red Hat Security Advisory: jbossweb security update

Published
February 22, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2011-1184 →CVE-2011-2526 →CVE-2011-4610 →CVE-2011-4858 →CVE-2011-5062 →CVE-2011-5063 →CVE-2011-5064 →CVE-2012-0022 →

📋 Description

CVE-2011-1184 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-2526 — tomcat: security manager restrictions bypass CVE-2011-4610 — JBoss Web remote denial of service when surrogate pair character is placed at buffer boundary CVE-2011-4858 — tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) CVE-2011-5062 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5063 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2011-5064 — tomcat: Multiple weaknesses in HTTP DIGEST authentication CVE-2012-0022 — tomcat: large number of parameters DoS

🎯 Affected products3

  • JBoss Enterprise BRMS Platform 5.1
  • Red Hat JBoss Portal 5.2
  • Red Hat JBoss SOA Platform 5.2

✅ Remediation

The References section of this erratum contains download links (you must log in to download the update). The JBoss server process must be restarted for this update to take effect. For users of JBoss Enterprise BRMS Platform and JBoss Enterprise SOA Platform, it is recommend to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.

🔗 References (11)