RHSA-2019:1296HighCVSS 8.8

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update

Published
May 30, 2019
Last Modified
October 14, 2026

🔗 CVE IDs covered (3)

CVE-2018-0495 →CVE-2018-0732 →CVE-2019-0211 →

📋 Description

CVE-2018-0495 — ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries CVE-2018-0732 — openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang CVE-2019-0211 — httpd: privilege escalation from modules scripts

🎯 Affected products1

  • JBoss Core Services Apache HTTP Server 2.4.29 SP2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Core Services installation (including all applications and configuration files).

🔗 References (8)