Red Hat Security Advisory

RHSA-2020:2529

tomcat6 security update

Released 2020-06-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-115.el6_10, tomcat6-admin-webapps-6.0.24-115.el6_10, tomcat6-docs-webapp-6.0.24-115.el6_10 +6
Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-115.el6_10, tomcat6-admin-webapps-6.0.24-115.el6_10, tomcat6-docs-webapp-6.0.24-115.el6_10 +6
Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-115.el6_10, tomcat6-el-2.1-api-6.0.24-115.el6_10, tomcat6-jsp-2.1-api-6.0.24-115.el6_10 +2
Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-admin-webapps-6.0.24-115.el6_10, tomcat6-docs-webapp-6.0.24-115.el6_10, tomcat6-javadoc-6.0.24-115.el6_10 +1
Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-115.el6_10, tomcat6-el-2.1-api-6.0.24-115.el6_10, tomcat6-jsp-2.1-api-6.0.24-115.el6_10 +2
Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-admin-webapps-6.0.24-115.el6_10, tomcat6-docs-webapp-6.0.24-115.el6_10, tomcat6-javadoc-6.0.24-115.el6_10 +1

Fixes 1 record

TI-2020-07593 CVE-2020-9484 · GHSA-344f-f5vg-2jfj

Deserialization of untrusted data in Apache Tomcat

HIGH 66

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.5552 Published 2020-05-20 Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502