Skip to content
OpenAdvisories
High RHSA-2023:1663 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.2 release and security update

Published Sep 16, 2024 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-admin-webapps 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-docs-webapp 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-el-3.0-api 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-java-jdk11 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-java-jdk8 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-javadoc 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-jsp-2.3-api 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-lib 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-selinux 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-servlet-4.0-api 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el7 jws5-tomcat-webapps 0:9.0.62-13.redhat_00011.1.el7jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-admin-webapps 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-docs-webapp 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-el-3.0-api 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-javadoc 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-jsp-2.3-api 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-lib 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-selinux 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-servlet-4.0-api 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el8 jws5-tomcat-webapps 0:9.0.62-13.redhat_00011.1.el8jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-admin-webapps 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-docs-webapp 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-el-3.0-api 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-javadoc 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-jsp-2.3-api 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-lib 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-selinux 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-servlet-4.0-api 0:9.0.62-13.redhat_00011.1.el9jws
Red Hat · JBoss Web Server 5 jboss_enterprise_web_server:5.7::el9 jws5-tomcat-webapps 0:9.0.62-13.redhat_00011.1.el9jws

Vulnerabilities 2

  • High 7.5
    CVE-2022-42252

    Apache Tomcat request smuggling via malformed content-length

    If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing a…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  • High 7.5
    CVE-2022-45143

    Apache Tomcat: JsonErrorReportValve escaping

    The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to s…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2141329
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2158695
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1663.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42252
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42252
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42252
  • report
    https://access.redhat.com/security/cve/CVE-2022-45143
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-45143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-45143
  • article
    https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj