ELSA-2013-0640

ELSA-2013-0640 - tomcat5 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-03-12

Description

[0:5.5.23-0jpp.38]
- Resolves: CVE-2012-3439 rhbz#882008 three DIGEST authentication
- implementation
- Resolves: CVE-2012-3546, rhbz#913034 Bypass of security constraints.
- Remove unneeded handling of FORM authentication in RealmBase

Related CVEs

CVE-2012-3546

CVE-2012-5885

CVE-2012-5886

CVE-2012-5887

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	tomcat5-5.5.23-0jpp.38.el5_9.src.rpm	f26a569bf4f86bb6d6605d29f731ea22	ELSA-2013-0870
	tomcat5-5.5.23-0jpp.38.el5_9.i386.rpm	dd49926c26d467d7c0cc649e56c3dfa3	ELSA-2013-0870
	tomcat5-admin-webapps-5.5.23-0jpp.38.el5_9.i386.rpm	9fa97b37b8adb96fc54cdcd0aeaa239b	ELSA-2013-0870
	tomcat5-common-lib-5.5.23-0jpp.38.el5_9.i386.rpm	323a27cbe282867254f2996ed353978c	ELSA-2013-0870
	tomcat5-jasper-5.5.23-0jpp.38.el5_9.i386.rpm	7e441bc780b44e3b1d1f08ed0cdacdb3	ELSA-2013-0870
	tomcat5-jasper-javadoc-5.5.23-0jpp.38.el5_9.i386.rpm	0d898bf5193bc2fbd62dfff9936bd365	ELSA-2013-0870
	tomcat5-jsp-2.0-api-5.5.23-0jpp.38.el5_9.i386.rpm	ca8baa66437f4035f6c096ccc7a7f5ec	ELSA-2013-0870
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.38.el5_9.i386.rpm	b097a615c542309cb41c9fac7474c179	ELSA-2013-0870
	tomcat5-server-lib-5.5.23-0jpp.38.el5_9.i386.rpm	271be0c41512a91cdc162ce556398192	ELSA-2013-0870
	tomcat5-servlet-2.4-api-5.5.23-0jpp.38.el5_9.i386.rpm	b6024d510e3ec47ac14eecae22d2c51b	ELSA-2013-0870
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.38.el5_9.i386.rpm	6ebb51dbf0766fe7b2ba41d36aa4bc66	ELSA-2013-0870
	tomcat5-webapps-5.5.23-0jpp.38.el5_9.i386.rpm	92b8406a73a85d00c996823a4b6d4d91	ELSA-2013-0870
Oracle Linux 5 (ia64)	tomcat5-5.5.23-0jpp.38.el5_9.src.rpm	f26a569bf4f86bb6d6605d29f731ea22	ELSA-2013-0870
	tomcat5-5.5.23-0jpp.38.el5_9.ia64.rpm	46406af15ec6f95e06e37766e907b8d4	ELSA-2013-0870
	tomcat5-admin-webapps-5.5.23-0jpp.38.el5_9.ia64.rpm	065b086e1121ac1bd3f3670620521eca	ELSA-2013-0870
	tomcat5-common-lib-5.5.23-0jpp.38.el5_9.ia64.rpm	a7256f9d7ef5e2597a0fe5fda3781ea1	ELSA-2013-0870
	tomcat5-jasper-5.5.23-0jpp.38.el5_9.ia64.rpm	b3812174d48e708574227034b48a0227	ELSA-2013-0870
	tomcat5-jasper-javadoc-5.5.23-0jpp.38.el5_9.ia64.rpm	6c7e9e396dbc689a8718f8eee8f6a0ac	ELSA-2013-0870
	tomcat5-jsp-2.0-api-5.5.23-0jpp.38.el5_9.ia64.rpm	d2c27e93b4b0256fd3244e1e52e72d0c	ELSA-2013-0870
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.38.el5_9.ia64.rpm	2ab213cfc10c727cd68fea3a09797734	ELSA-2013-0870
	tomcat5-server-lib-5.5.23-0jpp.38.el5_9.ia64.rpm	9edf3b7836cb2e8b6720fa63988b236f	ELSA-2013-0870
	tomcat5-servlet-2.4-api-5.5.23-0jpp.38.el5_9.ia64.rpm	87bab2df70cd4dfbd3bb89048abd5c03	ELSA-2013-0870
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.38.el5_9.ia64.rpm	0166a0a57425d0dc2911bf740d983981	ELSA-2013-0870
	tomcat5-webapps-5.5.23-0jpp.38.el5_9.ia64.rpm	9ad9afbfa4832205ddb15fed596ab513	ELSA-2013-0870
Oracle Linux 5 (x86_64)	tomcat5-5.5.23-0jpp.38.el5_9.src.rpm	f26a569bf4f86bb6d6605d29f731ea22	ELSA-2013-0870
	tomcat5-5.5.23-0jpp.38.el5_9.x86_64.rpm	91e855a2117b7ccb15cfaae8e229c89a	ELSA-2013-0870
	tomcat5-admin-webapps-5.5.23-0jpp.38.el5_9.x86_64.rpm	740ac0f653aa52382493d02b36ed0af0	ELSA-2013-0870
	tomcat5-common-lib-5.5.23-0jpp.38.el5_9.x86_64.rpm	75a10838431087d0bd86b4eaa48493d9	ELSA-2013-0870
	tomcat5-jasper-5.5.23-0jpp.38.el5_9.x86_64.rpm	2a51b673ebabb29f9f37463e91072eb4	ELSA-2013-0870
	tomcat5-jasper-javadoc-5.5.23-0jpp.38.el5_9.x86_64.rpm	b8d311aa3ddf6a565888fe7f71326ab2	ELSA-2013-0870
	tomcat5-jsp-2.0-api-5.5.23-0jpp.38.el5_9.x86_64.rpm	f163c55a83aff54523bf9af42515f264	ELSA-2013-0870
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.38.el5_9.x86_64.rpm	9f9de03ecdc2e3263cc9a698d96e87ee	ELSA-2013-0870
	tomcat5-server-lib-5.5.23-0jpp.38.el5_9.x86_64.rpm	1257009050cee71a7e4c0512c163d354	ELSA-2013-0870
	tomcat5-servlet-2.4-api-5.5.23-0jpp.38.el5_9.x86_64.rpm	d047206c23e416540922b08668b04d7d	ELSA-2013-0870
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.38.el5_9.x86_64.rpm	3070e7ba2f2deb7f74de4a5c7777a29d	ELSA-2013-0870
	tomcat5-webapps-5.5.23-0jpp.38.el5_9.x86_64.rpm	7c41199fc68c2c8d3de8d9b22697df6b	ELSA-2013-0870

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team