Red Hat Security AdvisoryRHSA-2018:2921
tomcat security update
Released 2018-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) tomcat-7.0.76-8.el7_5, tomcat-servlet-3.0-api-7.0.76-8.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-docs-webapp-7.0.76-8.el7_5 +6
- Red Hat Enterprise Linux ComputeNode (v. 7) tomcat-7.0.76-8.el7_5, tomcat-servlet-3.0-api-7.0.76-8.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-docs-webapp-7.0.76-8.el7_5 +6
- Red Hat Enterprise Linux Server (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-el-2.2-api-7.0.76-8.el7_5 +4
- Red Hat Enterprise Linux Server Optional (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-docs-webapp-7.0.76-8.el7_5 +6
- Red Hat Enterprise Linux Workstation (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-el-2.2-api-7.0.76-8.el7_5 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) tomcat-docs-webapp-7.0.76-8.el7_5, tomcat-javadoc-7.0.76-8.el7_5, tomcat-jsvc-7.0.76-8.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-el-2.2-api-7.0.76-8.el7_5 +4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) tomcat-7.0.76-8.el7_5, tomcat-admin-webapps-7.0.76-8.el7_5, tomcat-docs-webapp-7.0.76-8.el7_5 +6
Fixes 1 record
Priority MEDIUM 58
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.20354 · Published 2018-08-02 · Partial fix · 9.0.8, 8.5.31 +2 CWE-835
