RHSA-2022:1519HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update

Published
May 2, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-0778 →

📋 Description

CVE-2022-0778 — openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

🎯 Affected products32

  • Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-0:9.0.50-5.redhat_00007.1.el7jws.src as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-0:9.0.50-5.redhat_00007.1.el8jws.src as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-admin-webapps-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-admin-webapps-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-docs-webapp-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-docs-webapp-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-el-3.0-api-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-el-3.0-api-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-java-jdk11-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-java-jdk8-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-javadoc-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-javadoc-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-jsp-2.3-api-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-jsp-2.3-api-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-lib-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-lib-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-native-0:1.2.30-4.redhat_4.el7jws.src as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-native-0:1.2.30-4.redhat_4.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-native-0:1.2.30-4.redhat_4.el8jws.src as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-native-0:1.2.30-4.redhat_4.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-native-debuginfo-0:1.2.30-4.redhat_4.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-native-debuginfo-0:1.2.30-4.redhat_4.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-selinux-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-selinux-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • jws5-tomcat-servlet-4.0-api-0:9.0.50-5.redhat_00007.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 7 Server
  • jws5-tomcat-servlet-4.0-api-0:9.0.50-5.redhat_00007.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.6 for RHEL 8
  • +2 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)