Red Hat Security AdvisoryRHSA-2022:7272
Red Hat JBoss Web Server 5.7.0 release and security update
Released 2022-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 5.7 for RHEL 7 Server jws5-ecj-4.20.0-1.redhat_00002.1.el7jws, jws5-tomcat-9.0.62-9.redhat_00005.1.el7jws, jws5-tomcat-admin-webapps-9.0.62-9.redhat_00005.1.el7jws +11
- Red Hat JBoss Web Server 5.7 for RHEL 8 jws5-ecj-4.20.0-1.redhat_00002.1.el8jws, jws5-tomcat-9.0.62-9.redhat_00005.1.el8jws, jws5-tomcat-admin-webapps-9.0.62-9.redhat_00005.1.el8jws +9
- Red Hat JBoss Web Server 5.7 for RHEL 9 jws5-1-8.el9jws, jws5-ecj-4.20.0-1.redhat_00002.1.el9jws, jws5-javapackages-tools-3.4.1-5.15.11.el9jws +18
Fixes 2 records
Priority LOW 32
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00692 · Published 2022-01-27 · Partial fix · 10.0.16, 9.0.58 +1 CWE-367
Priority LOW 22
The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0…
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02362 · Published 2022-09-28 · Partial fix · 8.5.78, 9.0.62 +2 CWE-362
