RHSA-2018:2868: Important: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (modcluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.<br>This release of Red Hat JBoss Web Server 5.0 Service Pack 1 serves as a replacement for Red Hat JBoss Web Server 5.0, and includes bug fixes, which are documented in the Release Notes document linked to in the References.<br>Security Fix(es):<br><li> tomcat: Information Disclosure (CVE-2018-8037)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:2868?
The severity of RHSA-2018:2868 is considered important.
How do I fix RHSA-2018:2868?
To fix RHSA-2018:2868, update the affected packages to version 9.0.7-12.redhat_12.1.el7 or later.
Which packages are affected by RHSA-2018:2868?
The affected packages include jws5-tomcat, jws5-tomcat-admin-webapps, and others related to JBoss Web Server version 9.0.7-12.
What is the impact of not addressing RHSA-2018:2868?
Not addressing RHSA-2018:2868 could lead to potential security vulnerabilities and exploitation of the web applications hosted on the server.
Is RHSA-2018:2868 specific to any operating system version?
Yes, RHSA-2018:2868 specifically affects Red Hat Enterprise Linux versions 7 and 6 with the specified JBoss packages.