The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability.Referenceshttp://rhn.redhat.com/errata/RHSA-2016-0599.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0596.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0595.htmlhttp://rhn.redhat.com/errata/RHSA-2016-0598.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1308465http://rhn.redhat.com/errata/RHSA-2016-0597.html
