Red Hat Security AdvisoryRHSA-2017:1809
tomcat security update
Released 2017-07-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.69-12.el7_3, tomcat-servlet-3.0-api-7.0.69-12.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.69-12.el7_3, tomcat-admin-webapps-7.0.69-12.el7_3, tomcat-docs-webapp-7.0.69-12.el7_3 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.69-12.el7_3, tomcat-servlet-3.0-api-7.0.69-12.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.69-12.el7_3, tomcat-admin-webapps-7.0.69-12.el7_3, tomcat-docs-webapp-7.0.69-12.el7_3 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.69-12.el7_3, tomcat-admin-webapps-7.0.69-12.el7_3, tomcat-el-2.2-api-7.0.69-12.el7_3 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.69-12.el7_3, tomcat-admin-webapps-7.0.69-12.el7_3, tomcat-docs-webapp-7.0.69-12.el7_3 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.69-12.el7_3, tomcat-admin-webapps-7.0.69-12.el7_3, tomcat-el-2.2-api-7.0.69-12.el7_3 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.69-12.el7_3, tomcat-javadoc-7.0.69-12.el7_3, tomcat-jsvc-7.0.69-12.el7_3
Fixes 2 records
Priority MEDIUM 56
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error pag…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.16567 · Published 2017-06-06 · Partial fix · 9.0.0.M21, 8.5.15 +2 CWE-755
Priority MEDIUM 54
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade…
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.13225 · Published 2017-04-17 · Partial fix · 9.0.0.M18, 8.5.13 +2 CWE-668
