Red Hat Security AdvisoryRHSA-2014:1038
tomcat6 security update
Released 2014-08-11 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-admin-webapps-6.0.24-78.el6_5, tomcat6-docs-webapp-6.0.24-78.el6_5 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-admin-webapps-6.0.24-78.el6_5, tomcat6-docs-webapp-6.0.24-78.el6_5 +6
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-el-2.1-api-6.0.24-78.el6_5, tomcat6-jsp-2.1-api-6.0.24-78.el6_5 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-admin-webapps-6.0.24-78.el6_5, tomcat6-docs-webapp-6.0.24-78.el6_5 +2
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-el-2.1-api-6.0.24-78.el6_5, tomcat6-jsp-2.1-api-6.0.24-78.el6_5 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-78.el6_5, tomcat6-admin-webapps-6.0.24-78.el6_5, tomcat6-docs-webapp-6.0.24-78.el6_5 +2
Fixes 2 records
Priority LOW 36
Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbit…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07616 · Published 2014-05-31 · Partial fix · 6.0.40, 7.0.54 +1 CWE-264
Priority LOW 32
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09487 · Published 2014-02-26 · Partial fix · 6.0.39, 7.0.50 +1 CWE-200
