title: Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release
description: openssl: Read buffer overruns processing ASN.1 strings openssl: integer overflow in CipherUpdate openssl: NULL pointer dereference in X509_issuer_and_serial_hash() tomcat: JNDI realm authentication weakness tomcat: HTTP request smuggling when used with a reverse proxy tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS
cpes: cpe:/a:redhat:jboss_enterprise_web_server:5.6::el7 cpe:/a:redhat:jboss_enterprise_web_server:5.6::el8