Red Hat Security Advisory

RHSA-2025:0361

Red Hat JBoss Web Server 5.8.2 release and security update

Released 2025-01-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 5.8 for RHEL 7 Server jws5-tomcat-9.0.87-6.redhat_00006.1.el7jws, jws5-tomcat-admin-webapps-9.0.87-6.redhat_00006.1.el7jws, jws5-tomcat-docs-webapp-9.0.87-6.redhat_00006.1.el7jws +9
Red Hat JBoss Web Server 5.8 for RHEL 8 jws5-tomcat-9.0.87-6.redhat_00006.1.el8jws, jws5-tomcat-admin-webapps-9.0.87-6.redhat_00006.1.el8jws, jws5-tomcat-docs-webapp-9.0.87-6.redhat_00006.1.el8jws +7
Red Hat JBoss Web Server 5.8 for RHEL 9 jws5-tomcat-9.0.87-6.redhat_00006.1.el9jws, jws5-tomcat-admin-webapps-9.0.87-6.redhat_00006.1.el9jws, jws5-tomcat-docs-webapp-9.0.87-6.redhat_00006.1.el9jws +7

Fixes 1 record

TI-2024-33814 CVE-2024-50379 · GHSA-5j33-cvvr-w245

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

HIGH 82

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configura…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31824 Published 2024-12-17 Partial fix · 11.0.2, 10.1.34 +1 CWE-367