RHSA-2016:0490High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 OpenSSL security update

Published
March 22, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2015-0293 →CVE-2015-3197 →CVE-2016-0800 →

📋 Description

CVE-2015-0293 — openssl: assertion failure in SSLv2 servers CVE-2015-3197 — OpenSSL: SSLv2 doesn't block disabled ciphers CVE-2016-0800 — SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 6.4

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied, and back up your existing Red Hat JBoss Enterprise Application Platform installation (including all applications and configuration files).

🔗 References (8)