RHSA-2016:1649HighCVSS 5.6

Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6

Published
August 22, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2016-2105 →CVE-2016-2106 →CVE-2016-3110 →CVE-2016-5387 →

📋 Description

CVE-2016-2105 — openssl: EVP_EncodeUpdate overflow CVE-2016-2106 — openssl: EVP_EncryptUpdate overflow CVE-2016-3110 — mod_cluster: remotely Segfault Apache http server CVE-2016-5387 — HTTPD: sets environmental variable based on user supplied Proxy request header

🎯 Affected products50

  • Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-0:2.2.26-54.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-0:2.2.26-54.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-0:2.2.26-54.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-debuginfo-0:2.2.26-54.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-debuginfo-0:2.2.26-54.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-devel-0:2.2.26-54.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-devel-0:2.2.26-54.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-manual-0:2.2.26-54.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-manual-0:2.2.26-54.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-tools-0:2.2.26-54.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-tools-0:2.2.26-54.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-0:1-3.jbcs.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-1:1.0.2h-4.jbcs.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-debuginfo-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-debuginfo-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-devel-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-devel-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-libs-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-libs-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-perl-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-perl-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-static-1:1.0.2h-4.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-openssl-static-1:1.0.2h-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • jbcs-httpd24-runtime-0:1-3.jbcs.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • mod_cluster-0:1.2.13-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • mod_cluster-native-0:1.2.13-3.Final_redhat_2.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • +20 more not shown

✅ Remediation

Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically. Refer to the Red Hat JBoss Enterprise Web Server 2.1.1 Release Notes for a list of non security related fixes.

🔗 References (16)