Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Red Hat JBoss Web Server 3.1 Service Pack 10 Release Notes

Red Hat JBoss Web Server 3.1

For Use with the Red Hat JBoss Web Server 3.1

Red Hat Customer Content Services

Abstract

These release notes contain important information related to the Red Hat JBoss Web Server 3.1 Service Pack 10.

Welcome to the Red Hat JBoss Web Server version 3.1 Service Pack 10 release.

The primary focus of this release is to provide security updates to Red Hat JBoss Web Server version 3.1.

The JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It consists of:

  • Apache Tomcat: a servlet container in accordance with the Java Servlet Specification. JBoss Web Server contains Apache Tomcat 7 and Apache Tomcat 8.
  • The Apache Tomcat Native Library: a Tomcat library, which improves Tomcat scalability, performance, and integration with native server technologies.
  • The tomcat-vault extension: an extension for the JBoss Web Server used for securely storing passwords and other sensitive information used by a JBoss Web Server.
  • The mod_cluster library: a library that allows communication between Apache Tomcat and the Apache HTTP Server’s mod_proxy_cluster module. This allows the Apache HTTP Server to be used as a load balancer for JBoss Web Server.

Service packs for Red Hat JBoss Web Server are produced when a set of critical bug fixes and/or security patches are required before a new full release.

These service pack releases reduce the number of individual patches that we produce and enable customers to keep up to date.

This update includes all fixes and changes from Red Hat JBoss Web Server 3.1 Service Pack 9.

Note

From Red Hat JBoss Web Server 3.1 Service Pack 2, all the configuration files that were changed in the patch are appended by the suffix .zipnew to avoid overwriting existing configuration files.

If the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.

The JBoss Web Server 3.1 can be installed using one of the following sections of the installation guide:

To install this service pack:

  1. Download the Red Hat JBoss Web Server 3.1 Service Pack 10 file (.zip format) appropriate to your platform using the download link here (subscription required).
  2. Extract the .zip file to the Red Hat JBoss Web Server installation directory.

For Red Hat Enterprise Linux users who have installed Red Hat JBoss Web Server from RPM packages, can upgrade to the latest service pack using yum: 

# yum upgrade
Copy to Clipboard Toggle word wrap

Chapter 4. OS/JVM Certifications
Copy link

This update includes no additional certifications.

Chapter 5. Security Fixes
Copy link

This update includes fixes for the following security related issues:

Expand
IDImpactSummary

CVE-2020-1935

Low

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

CVE-2020-13935

Important

tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

Chapter 6. Resolved issues
Copy link

The following issues are resolved in the current service pack:

Expand
IssueDescription

JWS-1780

Update to the latest JBCS version [jws-3]

Chapter 7. Known issues
Copy link

There are no known issues for this release.

Chapter 8. Upgraded components
Copy link

There are no new upgraded components.

Legal Notice
Copy link

Copyright © 2020 Red Hat, Inc.
The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version.
Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law.
Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries.
Linux® is the registered trademark of Linus Torvalds in the United States and other countries.
Java® is a registered trademark of Oracle and/or its affiliates.
XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries.
MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries.
Node.js® is an official trademark of Joyent. Red Hat is not formally related to or endorsed by the official Joyent Node.js open source or commercial project.
The OpenStack® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community.
All other trademarks are the property of their respective owners.
Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat