Red Hat JBoss Web Server 6.0.3 addresses two security vulnerabilities in the Tomcat servlet container component: CVE-2024-34750, which involves improper handling of exceptional conditions, and CVE-2024-38286, a denial of service vulnerability. These issues could potentially affect the stability and reliability of the Tomcat server within JBoss Web Server. The update replaces version 6.0.2 and includes bug fixes and component upgrades. Red Hat has classified the security impact as Important and recommends applying the update on Red Hat Enterprise Linux versions 8 and 9. The advisory does not provide CVSS scores but references the CVE pages for detailed scoring and impact information.

The vulnerabilities fixed in this update could cause improper handling of exceptional conditions and denial of service in the Tomcat component of Red Hat JBoss Web Server. This may lead to service disruption or instability of Java web applications hosted on the affected server. No known exploits in the wild have been reported at the time of the advisory. The security impact is rated as Important by Red Hat Product Security.

A security update is available in Red Hat JBoss Web Server 6.0.3, which replaces version 6.0.2. Users should apply this update to remediate the vulnerabilities CVE-2024-34750 and CVE-2024-38286. Before applying the update, ensure all previously released errata relevant to your system have been applied. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation steps are indicated by the vendor advisory.