RHSA-2014:0528Medium

Red Hat Security Advisory: Red Hat JBoss Web Server 2.0.1 tomcat6 security update

Published
May 21, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (4)

CVE-2013-4286 →CVE-2013-4322 →CVE-2014-0033 →CVE-2014-0050 →

📋 Description

CVE-2013-4286 — tomcat: multiple content-length header poisoning flaws CVE-2013-4322 — tomcat: incomplete fix for CVE-2012-3544 CVE-2014-0033 — tomcat: session fixation still possible with disableURLRewriting enabled CVE-2014-0050 — apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream

🎯 Affected products1

  • Red Hat JBoss Web Server 2.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).

🔗 References (8)