RHSA-2014:0527Medium
Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 tomcat7 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2013-4286 — tomcat: multiple content-length header poisoning flaws CVE-2013-4322 — tomcat: incomplete fix for CVE-2012-3544 CVE-2014-0050 — apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream
🎯 Affected products1
- Red Hat JBoss Web Server 2.0
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2014:0527
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&downloadType=securityPatches&version=2.0.1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1062337
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1069905
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1069921
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0527.json