RHSA-2014:1086High

Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update

Published
August 21, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (7)

CVE-2013-4590 →CVE-2014-0118 →CVE-2014-0119 →CVE-2014-0221 →CVE-2014-0226 →CVE-2014-0227 →CVE-2014-0231 →

📋 Description

CVE-2013-4590 — tomcat: information disclosure via XXE when running untrusted web applications CVE-2014-0118 — httpd: mod_deflate denial of service CVE-2014-0119 — Tomcat/JBossWeb: XML parser hijack by malicious web application CVE-2014-0221 — openssl: DoS when sending invalid DTLS handshake CVE-2014-0226 — httpd: mod_status heap-based buffer overflow CVE-2014-0227 — Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter CVE-2014-0231 — httpd: mod_cgid denial of service

🎯 Affected products1

  • Red Hat JBoss Web Server 2.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).

🔗 References (11)