Red Hat Security Advisory

RHSA-2021:1202

Red Hat JBoss Web Server 3.1 Service Pack 12 security update

Released 2021-04-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native-1.2.23-24.redhat_24.ep7.el7

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476

TI-2021-02414 CVE-2021-3450 · GHSA-8hfj-xrj2-pm22

MEDIUM 58

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.18339 Published 2021-03-25 Fixed in 111.15.0 CWE-295