Red Hat Product Errata RHSA-2019:3929 - Security Advisory
Issued:
2019-11-20
Updated:
2019-11-20

RHSA-2019:3929 - Security Advisory

Synopsis

Important: Red Hat JBoss Web Server 5.2 security release

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated Red Hat JBoss Web Server 5.2.0 packages are now available for Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.

This release of Red Hat JBoss Web Server 5.2 serves as a replacement for Red Hat JBoss Web Server 5.1, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.

Security Fix(es):

  • openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)
  • openssl: 0-byte record padding oracle (CVE-2019-1559)
  • tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199 (CVE-2019-10072)
  • tomcat: XSS in SSI printenv (CVE-2019-0221)
  • tomcat: Apache Tomcat HTTP/2 DoS (CVE-2019-0199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Web Server 5 for RHEL 8 x86_64
  • JBoss Enterprise Web Server 5 for RHEL 7 x86_64
  • JBoss Enterprise Web Server 5 for RHEL 6 x86_64
  • JBoss Enterprise Web Server 5 for RHEL 6 i386

Fixes

  • BZ - 1645695 - CVE-2018-5407 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)
  • BZ - 1683804 - CVE-2019-1559 openssl: 0-byte record padding oracle
  • BZ - 1693325 - CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS
  • BZ - 1713275 - CVE-2019-0221 tomcat: XSS in SSI printenv
  • BZ - 1723708 - CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199

JBoss Enterprise Web Server 5 for RHEL 8

SRPM
jws5-ecj-4.12.0-1.redhat_1.1.el8jws.src.rpm SHA-256: 804789895cd337908fee64bf28908a45999e7fb46da5998e1afbaffe7f0a2051
jws5-javapackages-tools-3.4.1-5.15.11.el8jws.src.rpm SHA-256: b4fb893051bc15ce5130d851378c28a8fa63cc5276888987431f8bac426a4c8b
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el8jws.src.rpm SHA-256: 993a5d347f39c71065b49e6272be9942695995cd986ce737d0fc6d44ed76e1e4
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el8jws.src.rpm SHA-256: 23da7109eb8133e76e87d8245bf8e3fc7d4f9bd9dad9187651ca424d31ef5fd9
jws5-tomcat-9.0.21-10.redhat_4.1.el8jws.src.rpm SHA-256: 2a14272700ce77180874f218416d1f39ce1540618e4426a9036678b17c7ba82b
jws5-tomcat-native-1.2.21-34.redhat_34.el8jws.src.rpm SHA-256: fdf75c21a4387484878648a95100d1b347301251eaf977297171e89b14e9c9ed
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el8jws.src.rpm SHA-256: e05a539f1f10c52544b2938038b8261d76109ee9a367dafc831b81dd0e6b8329
x86_64
jws5-ecj-4.12.0-1.redhat_1.1.el8jws.noarch.rpm SHA-256: 812438562f618fbeead4b7fdf35da7ca827554c67faf60d6c968e047a0a26fb4
jws5-javapackages-tools-3.4.1-5.15.11.el8jws.noarch.rpm SHA-256: c206e3e8429ed1dd22d88da234cda5f42921a5371da83731e0ef8454a866c911
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el8jws.noarch.rpm SHA-256: 246fdcb81869603a767f707cb69b48a194dbc1f48a612c56726368820b76efee
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el8jws.noarch.rpm SHA-256: 0d94ca46497e66a21014dfaca18dfdcd7fe157205e97f28e63a0033275c9ba08
jws5-mod_cluster-tomcat-1.4.1-1.Final_redhat_00001.2.el8jws.noarch.rpm SHA-256: 45c1a5ad90ef52dd9dec554589e291368a0809872f3cef04a07482c74b2dd2ab
jws5-python-javapackages-3.4.1-5.15.11.el8jws.noarch.rpm SHA-256: 6c6b7f0d6f27e25f8e89c9bb816181834eb03e275ca8386afa5c6663fea0b703
jws5-tomcat-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: 4277b1e93841d3bf2811fe96cf7dbbd30a5ee5e3e6684ceefb42424c79d71707
jws5-tomcat-admin-webapps-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: bf90c6060d49d60dccb7e386488ef0bf2f611a8de7bd8f8d553032b8fcf51cdc
jws5-tomcat-docs-webapp-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: f3423f292101ea7c3096589e3cba1a6caf8b898d107ed9a5a16e8ef4797fef76
jws5-tomcat-el-3.0-api-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: 542c3000a9af5696aa746578870837d56275a22d44f41c9234a2d0651f7773ea
jws5-tomcat-javadoc-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: baeec2e4cde3a6ea4c3e24177e86d66f420cd0e187554ecbc0ff3a0aebf04462
jws5-tomcat-jsp-2.3-api-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: 6b19842da783fa47003757a0d47f5e0443ffb7427f0f446b819f817ebdb4cd88
jws5-tomcat-lib-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: fdd403202002ed0b8690c08059cc5b6d34a28ccb54df8a8823eababbfe3cb044
jws5-tomcat-native-1.2.21-34.redhat_34.el8jws.x86_64.rpm SHA-256: e41727c280decee79de9235dd2e8920373224bc40ce4d8ccc911f09e71516fbb
jws5-tomcat-native-debuginfo-1.2.21-34.redhat_34.el8jws.x86_64.rpm SHA-256: 7ccefcf9a7f823d6abce9a2715e37bc4dac8ceb252bdcbee2f04312481f06fbc
jws5-tomcat-selinux-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: 424dc3d8bbe2b2a5856400db60e6fc89767868a88f1c023f094f6be3ccd80b6e
jws5-tomcat-servlet-4.0-api-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: f017813c6ebffd3e57250ea272e808a0aab0682d55aaffd7e7e8a86a8fa31ade
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el8jws.noarch.rpm SHA-256: 5bd8c5d8b89364724be16c8ecc8b410b317ecec2caa96f69972d4c8463013c23
jws5-tomcat-vault-javadoc-1.1.8-1.Final_redhat_1.1.el8jws.noarch.rpm SHA-256: ec1d957f33d38da10cd4159f32df317c4dbc99e651c972b1136e59437e7e5153
jws5-tomcat-webapps-9.0.21-10.redhat_4.1.el8jws.noarch.rpm SHA-256: 9994676beba5cf4f83de79d0317a572a4b8fa7f29045050161a150eac0d652aa

JBoss Enterprise Web Server 5 for RHEL 7

SRPM
jws5-ecj-4.12.0-1.redhat_1.1.el7jws.src.rpm SHA-256: e4e97516ad4589ba5012ef97124cac3c67297c29f243ed035594ac479161427e
jws5-javapackages-tools-3.4.1-5.15.11.el7jws.src.rpm SHA-256: 59127ddccc89952112652c59bad2d10237644b81c7c9f891cb8ee0a305ebcf60
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el7jws.src.rpm SHA-256: 6f223c805b0d4fdb26610c9181f1ab8642b810be18202de7c49a79ab61e43f12
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el7jws.src.rpm SHA-256: e746b49be1b38d3bfe45b62262c0709bb87d13e9ca9823cd33b08c71136711b8
jws5-tomcat-9.0.21-10.redhat_4.1.el7jws.src.rpm SHA-256: 5c62bd88af0ac395cc5b80c4ba5555992f543b6b68ffd58d3df0d82e551335df
jws5-tomcat-native-1.2.21-34.redhat_34.el7jws.src.rpm SHA-256: 9eecb64c1b98f088fa1b31a30410d611328b9cede629ca8af16217e4f72b7194
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el7jws.src.rpm SHA-256: ff378e24021b6e3ecfdc58e2125907775fc426f963efb6bf6fc0ab019ae3dc8d
x86_64
jws5-ecj-4.12.0-1.redhat_1.1.el7jws.noarch.rpm SHA-256: 8e5216baf254dfcca932fa5f17c97dbc92248566d68b0510a654e2ec528b6a19
jws5-javapackages-tools-3.4.1-5.15.11.el7jws.noarch.rpm SHA-256: dfc37635caede2dce09840fd01b8a7d8a0b026a17154f465a8a2dc1f4c52b78f
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el7jws.noarch.rpm SHA-256: 25273dffa95d4b492c561c6b98847f7c3e4cd462676b5705860b5ca43cb41b0d
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el7jws.noarch.rpm SHA-256: d382a283d2bc94d1d2a886d1dbd47a18a404dccb9bd7fec7b7f021fa93836cbe
jws5-mod_cluster-tomcat-1.4.1-1.Final_redhat_00001.2.el7jws.noarch.rpm SHA-256: a7659a5e2e8b4c2b5bdf6e41031054d61df02febfbefd4f3ed8bac8050a34f39
jws5-python-javapackages-3.4.1-5.15.11.el7jws.noarch.rpm SHA-256: 29710f94cb6925375f1f985b14f1c75bdf0cca85fbfd5ff0b21a4f2ca9d64e21
jws5-tomcat-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 53caad7b7c6a681a8a0073d9ecfc219a2413ba99cc044dca436303c79664e28f
jws5-tomcat-admin-webapps-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 4cfe2b7bce324f1a8992a84e508b8cf81be8c085d2299781830287f8863bd3f3
jws5-tomcat-docs-webapp-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 10a338b5f68f40e734c9d8fe5711303b9768b685fcd73491cf3b3a64e19b6272
jws5-tomcat-el-3.0-api-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 05ff062297c5a6e3ee2b0f54994140b67d62f8c998b76c98694927c5758356f8
jws5-tomcat-javadoc-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 52e6ba1e9b685370cc11d32c71743fd2e72786d38d9c42785da911538f297d27
jws5-tomcat-jsp-2.3-api-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 663248a31e00bb9d2bc56d9ed8a2231fb5898da248f7eda749713f688a2b5ad4
jws5-tomcat-lib-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 75b4f6fccce99c6a2155e419066506b5cb488a05d9a373bf491ec649e1805f3c
jws5-tomcat-native-1.2.21-34.redhat_34.el7jws.x86_64.rpm SHA-256: 6020659bb3c5b0db05c412a89ba2bf18cf6bdb8ab1c9a859d59a7a2002405b70
jws5-tomcat-native-debuginfo-1.2.21-34.redhat_34.el7jws.x86_64.rpm SHA-256: 3270abac12eaf960beb7adecf59cea18d41de675d20c5942b1b0f3249fa1e186
jws5-tomcat-selinux-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 6fa5385f22ede6bdcb4e9e772f74986b89a7b6f5d25a6f522ef863f7d37c3c7c
jws5-tomcat-servlet-4.0-api-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: d6e51f66a86d970b4b4fdc16727611e47d5ba249f6debb32d62b2f560736b54f
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el7jws.noarch.rpm SHA-256: 7c480e398eb371c59cbffc83848f4a67c2a78578ebfcd4aa7fbf2444b59ae0c3
jws5-tomcat-vault-javadoc-1.1.8-1.Final_redhat_1.1.el7jws.noarch.rpm SHA-256: 8090b4f64cc82da5bcd0d4f42b8c32e159472103bd9bf9018770a0107a3790e1
jws5-tomcat-webapps-9.0.21-10.redhat_4.1.el7jws.noarch.rpm SHA-256: 0d8a1347eacc1ebe0a6cfd89bf0ecd4d356d70e99d9ae5c97b0aa6cf956cf951

JBoss Enterprise Web Server 5 for RHEL 6

SRPM
jws5-ecj-4.12.0-1.redhat_1.1.el6jws.src.rpm SHA-256: 6497c8faa5e990820e278675b89031a82aa12f672b50dba49da1525c9f55a7c9
jws5-javapackages-tools-3.4.1-5.15.11.el6jws.src.rpm SHA-256: 2737c87b0044bf873e22231db5acb2cdc2f9d71c4720ab31096a48fde8a08fc6
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el6jws.src.rpm SHA-256: 8ec8e949bf3184808b35d6f995e49330e51697f7a24ba553a71632fffe7c2e2b
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el6jws.src.rpm SHA-256: 0504ae13ed5ccd89e524bad391c0a05f15f21db55c24dee057ff806217b1ac39
jws5-tomcat-9.0.21-10.redhat_4.1.el6jws.src.rpm SHA-256: 20a9a8cb55844d65fbafe3838c747cdd219bd79fd719c1eddd3fa74158dec2d3
jws5-tomcat-native-1.2.21-34.redhat_34.el6jws.src.rpm SHA-256: 810da103be2bc5661bcce72e88f5d1fb321ff2d6cdac068d151305b471a40d5c
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el6jws.src.rpm SHA-256: 105de7ae479e76cf0c095015992bfbd44667f2d04fe2fbbe022d00448ff6feac
x86_64
jws5-ecj-4.12.0-1.redhat_1.1.el6jws.noarch.rpm SHA-256: 141f3b73512b734f5a88e024cdd4a34640df022b0858e330fa794f598d8b78a2
jws5-javapackages-tools-3.4.1-5.15.11.el6jws.noarch.rpm SHA-256: dadae2fbefa9058a8af42fc45ecc81dbc0d84ffc4f6823fc61e33bc829d84d72
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el6jws.noarch.rpm SHA-256: d487a8ca4b4f34d889c13075ec528bc48c05b17a0169a6ee26cf8f0e60445b79
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el6jws.noarch.rpm SHA-256: ed22750414672aff885d349b70e88713c554e8382cc4d73a3d6bf167edc8c291
jws5-mod_cluster-tomcat-1.4.1-1.Final_redhat_00001.2.el6jws.noarch.rpm SHA-256: a7a35539d916c19dd8419b14bb4767e75963459614116642af3cbd25886420a9
jws5-python-javapackages-3.4.1-5.15.11.el6jws.noarch.rpm SHA-256: 0a55675f5d5a38bf8de54dbe91109b4ab59c1fc9b3aa1f3c06e24e9d834c977f
jws5-tomcat-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: f56b42540d7ecf6d82fc75ce1d420d0868adb75c2d98036029979e0fc4c8330d
jws5-tomcat-admin-webapps-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 66bbfd0fe33a031deaa47f6ea589b3feccbeb82819251002b6d34181e647fee5
jws5-tomcat-docs-webapp-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 2031f0e4199655d9e812754dd2c0ee0b8307086c65c7d0fb3146c740443de49a
jws5-tomcat-el-3.0-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 69eeaa85007bcb4f132681687f56184951a4ba87746241779ec5310c8dc4e8b7
jws5-tomcat-javadoc-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 5e4ef4431031c6d391656ccd7ea9c1df64dd881a2f7c2e42110fc21b4caada83
jws5-tomcat-jsp-2.3-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 6c3814d02b852221ff3bf9d3cb35a9883bf0994d0b07ba349e6db553c8fa6b72
jws5-tomcat-lib-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: ecb79b67df30600750f9e08838863a82d7ac05eec9f063aa258b39ea1c9920da
jws5-tomcat-native-1.2.21-34.redhat_34.el6jws.x86_64.rpm SHA-256: 497332d8b0e54853ba43110b50c29271a79979967e3e302d3f25c1d0982c9843
jws5-tomcat-native-debuginfo-1.2.21-34.redhat_34.el6jws.x86_64.rpm SHA-256: 2b91c3e9dddcc5528483426d1a60edecb194f9c77ba1213aef324fc66ac90bb8
jws5-tomcat-selinux-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 6da35ea9e0d85f363af295a930506a11b5b77f9adb9b5b8ce29fa46011b5a8e5
jws5-tomcat-servlet-4.0-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 14031bc9f4714f9fed624e0531505a1930a9d491d4ebb06541ad203c4cd6fbe2
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el6jws.noarch.rpm SHA-256: f049ad7d15362e79063a91a732f6a1dd447ea837356ef59df085ce3a21dc60b5
jws5-tomcat-vault-javadoc-1.1.8-1.Final_redhat_1.1.el6jws.noarch.rpm SHA-256: 0990c2ceee286b6d91d30574668d5d86a1ad7bc1e3293e99e2b23f0a4acdd9ab
jws5-tomcat-webapps-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: df891c797d4f79f0389144506716267e1f05e26819c3eaef7bed629db8d72f72
i386
jws5-ecj-4.12.0-1.redhat_1.1.el6jws.noarch.rpm SHA-256: 141f3b73512b734f5a88e024cdd4a34640df022b0858e330fa794f598d8b78a2
jws5-javapackages-tools-3.4.1-5.15.11.el6jws.noarch.rpm SHA-256: dadae2fbefa9058a8af42fc45ecc81dbc0d84ffc4f6823fc61e33bc829d84d72
jws5-jboss-logging-3.3.2-1.Final_redhat_00001.1.el6jws.noarch.rpm SHA-256: d487a8ca4b4f34d889c13075ec528bc48c05b17a0169a6ee26cf8f0e60445b79
jws5-mod_cluster-1.4.1-1.Final_redhat_00001.2.el6jws.noarch.rpm SHA-256: ed22750414672aff885d349b70e88713c554e8382cc4d73a3d6bf167edc8c291
jws5-mod_cluster-tomcat-1.4.1-1.Final_redhat_00001.2.el6jws.noarch.rpm SHA-256: a7a35539d916c19dd8419b14bb4767e75963459614116642af3cbd25886420a9
jws5-python-javapackages-3.4.1-5.15.11.el6jws.noarch.rpm SHA-256: 0a55675f5d5a38bf8de54dbe91109b4ab59c1fc9b3aa1f3c06e24e9d834c977f
jws5-tomcat-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: f56b42540d7ecf6d82fc75ce1d420d0868adb75c2d98036029979e0fc4c8330d
jws5-tomcat-admin-webapps-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 66bbfd0fe33a031deaa47f6ea589b3feccbeb82819251002b6d34181e647fee5
jws5-tomcat-docs-webapp-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 2031f0e4199655d9e812754dd2c0ee0b8307086c65c7d0fb3146c740443de49a
jws5-tomcat-el-3.0-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 69eeaa85007bcb4f132681687f56184951a4ba87746241779ec5310c8dc4e8b7
jws5-tomcat-javadoc-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 5e4ef4431031c6d391656ccd7ea9c1df64dd881a2f7c2e42110fc21b4caada83
jws5-tomcat-jsp-2.3-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 6c3814d02b852221ff3bf9d3cb35a9883bf0994d0b07ba349e6db553c8fa6b72
jws5-tomcat-lib-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: ecb79b67df30600750f9e08838863a82d7ac05eec9f063aa258b39ea1c9920da
jws5-tomcat-native-1.2.21-34.redhat_34.el6jws.i686.rpm SHA-256: f75ca7178e42fce451f8a5152edf337ed4a3572aea665b430fbef25e7e0f6b5b
jws5-tomcat-native-debuginfo-1.2.21-34.redhat_34.el6jws.i686.rpm SHA-256: e01256a49cc15b58987ebc67c0efc9512ea557a73a45c714bde6564df741f971
jws5-tomcat-selinux-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 6da35ea9e0d85f363af295a930506a11b5b77f9adb9b5b8ce29fa46011b5a8e5
jws5-tomcat-servlet-4.0-api-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: 14031bc9f4714f9fed624e0531505a1930a9d491d4ebb06541ad203c4cd6fbe2
jws5-tomcat-vault-1.1.8-1.Final_redhat_1.1.el6jws.noarch.rpm SHA-256: f049ad7d15362e79063a91a732f6a1dd447ea837356ef59df085ce3a21dc60b5
jws5-tomcat-vault-javadoc-1.1.8-1.Final_redhat_1.1.el6jws.noarch.rpm SHA-256: 0990c2ceee286b6d91d30574668d5d86a1ad7bc1e3293e99e2b23f0a4acdd9ab
jws5-tomcat-webapps-9.0.21-10.redhat_4.1.el6jws.noarch.rpm SHA-256: df891c797d4f79f0389144506716267e1f05e26819c3eaef7bed629db8d72f72

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.