Skip to content
OpenAdvisories
Medium RHSA-2024:1916 1 CVE

Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.2 release and security update

Published Sep 16, 2024 · Updated Sep 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-admin-webapps 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-docs-webapp 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-el-5.0-api 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-javadoc 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-jsp-3.1-api 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-lib 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-selinux 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-servlet-6.0-api 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el8 jws6-tomcat-webapps 0:10.1.8-7.redhat_00014.1.el8jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-admin-webapps 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-docs-webapp 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-el-5.0-api 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-javadoc 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-jsp-3.1-api 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-lib 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-selinux 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-servlet-6.0-api 0:10.1.8-7.redhat_00014.1.el9jws
Red Hat · JBoss Web Server 6 jboss_enterprise_web_server:6.0::el9 jws6-tomcat-webapps 0:10.1.8-7.redhat_00014.1.el9jws

Vulnerabilities 1

  • Medium 6.3
    CVE-2024-23672

    Apache Tomcat: WebSocket DoS with incomplete closing handshake

    Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, fr…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/6.0/html-single/red_hat_jboss_web_server_6.0_service_pack_2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269608
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1916.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-23672
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-23672
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-23672
  • article
    https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f