RHSA-2025:0343MediumCVSS 8.1
Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.5 release and security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2024-50379 — tomcat: RCE due to TOCTOU issue in JSP compilation
🎯 Affected products1
- Red Hat JBoss Web Server 6
✅ Remediation
Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files. The References section of this erratum contains a download link for the update. You must be logged in to download the update. Workaround: Consider setting the readonly initialization parameter value to true (the default value), if that is not possible, do not use a case-insensitive file system.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2025:0343
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.0/html-single/red_hat_jboss_web_server_6.0_service_pack_5_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2332817
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0343.json