Lucene search

RedHatRHSA-2017:1809

HistoryJul 27, 2017 - 3:41 a.m.

(RHSA-2017:1809) Important: tomcat security update

2017-07-2703:41:43

access.redhat.com

EPSS

0.009

Percentile

82.7%

JSON

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

A vulnerability was discovered in the error page mechanism in Tomcat’s DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. (CVE-2017-5664)
A vulnerability was discovered in Tomcat. When running an untrusted application under a SecurityManager it was possible, under some circumstances, for that application to retain references to the request or response objects and thereby access and/or modify information associated with another web application. (CVE-2017-5648)

OSVersionArchitecturePackageVersionFilename
RedHat7noarchtomcat< 7.0.69-12.el7_3tomcat-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-docs-webapp< 7.0.69-12.el7_3tomcat-docs-webapp-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-admin-webapps< 7.0.69-12.el7_3tomcat-admin-webapps-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-servlet-3.0-api< 7.0.69-12.el7_3tomcat-servlet-3.0-api-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-jsp-2.2-api< 7.0.69-12.el7_3tomcat-jsp-2.2-api-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-el-2.2-api< 7.0.69-12.el7_3tomcat-el-2.2-api-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-lib< 7.0.69-12.el7_3tomcat-lib-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-webapps< 7.0.69-12.el7_3tomcat-webapps-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-jsvc< 7.0.69-12.el7_3tomcat-jsvc-7.0.69-12.el7_3.noarch.rpm
RedHat7noarchtomcat-javadoc< 7.0.69-12.el7_3tomcat-javadoc-7.0.69-12.el7_3.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	tomcat	< 7.0.69-12.el7_3	tomcat-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-docs-webapp	< 7.0.69-12.el7_3	tomcat-docs-webapp-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-admin-webapps	< 7.0.69-12.el7_3	tomcat-admin-webapps-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-servlet-3.0-api	< 7.0.69-12.el7_3	tomcat-servlet-3.0-api-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-jsp-2.2-api	< 7.0.69-12.el7_3	tomcat-jsp-2.2-api-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-el-2.2-api	< 7.0.69-12.el7_3	tomcat-el-2.2-api-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-lib	< 7.0.69-12.el7_3	tomcat-lib-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-webapps	< 7.0.69-12.el7_3	tomcat-webapps-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-jsvc	< 7.0.69-12.el7_3	tomcat-jsvc-7.0.69-12.el7_3.noarch.rpm
RedHat	7	noarch	tomcat-javadoc	< 7.0.69-12.el7_3	tomcat-javadoc-7.0.69-12.el7_3.noarch.rpm