Red Hat JBoss Web Server 6.0.3 includes security updates addressing two vulnerabilities in the embedded Apache Tomcat component: CVE-2024-34750, which involves improper handling of exceptional conditions, and CVE-2024-38286, a denial of service vulnerability. These vulnerabilities could impact the stability and reliability of the web server. The release replaces version 6.0.2 and includes bug fixes and enhancements documented in the release notes. The vendor advisory classifies the update as Important and provides a download link for the updated version. No CVSS scores are provided in the advisory, but the severity is noted as Important.

The vulnerabilities fixed in Red Hat JBoss Web Server 6.0.3 could allow an attacker to cause denial of service conditions or trigger improper handling of exceptional conditions in the Tomcat servlet container, potentially affecting availability and stability of hosted Java web applications. The advisory rates the impact as Important, indicating a significant but not critical security risk.

A fixed version, Red Hat JBoss Web Server 6.0.3, is available and replaces version 6.0.2. Users should back up their existing installations, including applications and configuration files, before applying the update. Applying this update will remediate the identified vulnerabilities. No additional mitigation steps are indicated by the vendor advisory.