How to mitigate Beast attack properly

[minige]

Hello,

Could anybody please point me on valid instruction about how to mitigate Beast TSL attack on Tomcat.

I mean this vulnerability: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389.

There are a lot of references on this issue over the internet but most dedicated to Apache.

I'm using JBossWeb bundled with JBoss 5.1.0.GA (with HttpConnector)

Thanks,

Mikhail

[jaikiran]

http://www.redhat.com/security/data/cve/CVE-2011-3389.html

[minige]

Thanks for your response, Jaikiran.

Do I correct unredstand that problem is not in JBossWeb but in JDK, so I only need to update to most recent Oracle JDK?

Thanks,

Mikhail