Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update
Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update
Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update
Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP1 security update
Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.
Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update
Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update
Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update
Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update
It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.
It was found that Red Hat JBoss Core Services incorrectly included CVE-2016-3705 as resolved in Apache HTTP 2.4.23 (erratum RHSA-2016:2957). The release did not include the fix to libxml2, leaving it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for CVE-2016-3705.
Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update