https://bugzilla.redhat.com/show_bug.cgi?id=1422148
--- Comment #19 from Timothy Walsh <twalsh(a)redhat.com> ---
Statement:
This issue was made easier to exploit, causing a denial of service when the
patch for CVE-2016-6816 was present and the patch that corrected this flaw was
not. The issue was not classified as a security flaw upstream. It was
corrected in products like Red Hat Enterprise Linux 6 and 7 and JBoss
Enterprise Web Server 3 prior to the fix for CVE-2016-6816 being applied. This
was not the case for
JBoss Enterprise Application Server 6. As a result, only EAP 6.4.13 is
vulnerable to this issue and 6.4.14 corrects it. For further information,
refer to
https://access.redhat.com/articles/2991951
--
You are receiving this mail because:
You are on the CC list for the bug.