RHSA-2016:0446High

Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 OpenSSL Security Update

Published
March 14, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2015-0293 →CVE-2015-3197 →CVE-2016-0800 →

📋 Description

CVE-2015-0293 — openssl: assertion failure in SSLv2 servers CVE-2015-3197 — OpenSSL: SSLv2 doesn't block disabled ciphers CVE-2016-0800 — SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

🎯 Affected products1

  • Red Hat JBoss Web Server 3.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied, and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (8)