Red Hat has issued an update for httpd and httpd22 for JBoss Enterprise Web Server EL4 and EL5. This fixes some vulnerabilities, which can be exploited by malicious people to manipulate certain data, cause a DoS (Denial of Service), and bypass certain security restrictions.

For more information:
SA36549
SA36675
SA37291

Solution
Updated packages are available via Red Hat Network.
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers