Red Hat Security AdvisoryRHSA-2011:0335
tomcat6 security and bug fix update
Released 2011-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +7
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-el-2.1-api-6.0.24-24.el6_0, tomcat6-jsp-2.1-api-6.0.24-24.el6_0 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +3
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-el-2.1-api-6.0.24-24.el6_0, tomcat6-jsp-2.1-api-6.0.24-24.el6_0 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-24.el6_0, tomcat6-admin-webapps-6.0.24-24.el6_0, tomcat6-docs-webapp-6.0.24-24.el6_0 +3
Fixes 2 records
Priority MEDIUM 43
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2349 · Published 2011-02-17 · Fixed in 7.0.7, 6.0.32 +1
Priority LOW 33
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07885 · Published 2011-02-10 · Fixed in 6.0.32, 7.0.8 CWE-399
