Skip to content
OpenAdvisories
High RHSA-2022:1519 1 CVE

Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update

Published Sep 30, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-admin-webapps 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-docs-webapp 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-el-3.0-api 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-java-jdk11 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-java-jdk8 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-javadoc 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-jsp-2.3-api 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-lib 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-native 0:1.2.30-4.redhat_4.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-native-debuginfo 0:1.2.30-4.redhat_4.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-selinux 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-servlet-4.0-api 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el7 jws5-tomcat-webapps 0:9.0.50-5.redhat_00007.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-admin-webapps 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-docs-webapp 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-el-3.0-api 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-javadoc 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-jsp-2.3-api 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-lib 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-native 0:1.2.30-4.redhat_4.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-native-debuginfo 0:1.2.30-4.redhat_4.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-selinux 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-servlet-4.0-api 0:9.0.50-5.redhat_00007.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.6::el8 jws5-tomcat-webapps 0:9.0.50-5.redhat_00007.1.el8jws

Vulnerabilities 1

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062202
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1519.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0778
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0778
  • article
    https://www.openssl.org/news/secadv/20220315.txt