Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 security update

CVE-2015-0209 — openssl: use-after-free on invalid EC private key import CVE-2015-5312 — libxml2: CPU exhaustion when processing specially crafted XML input CVE-2015-5345 — tomcat: directory disclosure CVE-2015-5346 — tomcat: Session fixation CVE-2015-5351 — tomcat: CSRF token leak CVE-2015-7497 — libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey CVE-2015-7498 — libxml2: Heap-based buffer overflow in xmlParseXmlDecl CVE-2015-7499 — libxml2: Heap-based buffer overflow in xmlGROW CVE-2015-7500 — libxml2: Heap buffer overflow in xmlParseMisc CVE-2015-7941 — libxml2: Out-of-bounds memory access CVE-2015-7942 — libxml2: heap-based buffer overflow in xmlParseConditionalSections() CVE-2015-8035 — libxml2: DoS caused by incorrect error detection during XZ decompression CVE-2015-8241 — libxml2: Buffer overread with XML parser in xmlNextChar CVE-2015-8242 — libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode CVE-2015-8317 — libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration CVE-2015-8710 — libxml2: out-of-bounds memory access when parsing an unclosed HTML comment CVE-2016-0706 — tomcat: security manager bypass via StatusManagerServlet CVE-2016-0714 — tomcat: Security Manager bypass via persistence mechanisms CVE-2016-0763 — tomcat: security manager bypass via setGlobalContext()