Red Hat JBoss Web Server 5.8.1 is a security update replacing version 5.8.0, addressing two vulnerabilities in the Tomcat servlet container component. The first vulnerability (CVE-2024-34750) concerns improper handling of exceptional conditions, which could lead to unexpected behavior or errors. The second vulnerability (CVE-2024-38286) is a denial of service issue in Tomcat. The advisory does not provide CVSS scores but rates the update as important. The update is available for Red Hat JBoss Web Server 5.8 on RHEL 7, 8, and 9. The vendor advisory recommends applying this update after ensuring all previous errata are applied.

The vulnerabilities fixed include improper handling of exceptional conditions and a denial of service in the Tomcat component of Red Hat JBoss Web Server. These issues could potentially disrupt service availability or cause unexpected errors in hosted Java web applications. No known exploits in the wild have been reported. The security impact is rated as important by Red Hat Product Security.

Red Hat has released version 5.8.1 of JBoss Web Server to address these vulnerabilities. Users should apply this update to affected systems running Red Hat JBoss Web Server 5.8 on RHEL 7, 8, or 9. Before applying the update, ensure all previously released errata relevant to the system have been applied. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are indicated by the vendor.