First published: Wed Oct 06 2021(Updated: )
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.<br>This release of Red Hat JBoss Web Server 5.5.1 serves as a replacement for Red Hat JBoss Web Server 5.5.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.<br>Security Fix(es):<br><li> tomcat: Apache Tomcat DoS with unexpected TLS packet (CVE-2021-41079)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat JBoss Web Server |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:3743 is classified as important.
To fix RHSA-2021:3743, it is recommended to apply the latest updates provided by Red Hat for the affected components.
RHSA-2021:3743 affects the Red Hat JBoss Web Server which includes Apache Tomcat and related extensions.
No specific workaround is mentioned for RHSA-2021:3743, and it is advised to apply the security update.
You can check if your system is vulnerable to RHSA-2021:3743 by reviewing the installed versions of the affected components against the fixed versions listed in the advisory.