ELSA-2017-0935

ELSA-2017-0935 - tomcat security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-04-12

Description

[0:7.0.69-11]
- Resolves: rhbz#1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402662 CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests

Related CVEs

CVE-2016-6816

CVE-2016-8745

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	tomcat-7.0.69-11.el7_3.src.rpm	21b40f9da02e74ef77fb7a169717eff5	ELSA-2020-5020
	tomcat-7.0.69-11.el7_3.noarch.rpm	5cc265fe9208d7e7826ba651a74d5944	ELSA-2020-5020
	tomcat-admin-webapps-7.0.69-11.el7_3.noarch.rpm	88b8a321755e089874c5bd446f7659bf	ELSA-2020-5020
	tomcat-docs-webapp-7.0.69-11.el7_3.noarch.rpm	9b341ffd2b0d4a8bd9733b5ec95378a6	ELSA-2020-5020
	tomcat-el-2.2-api-7.0.69-11.el7_3.noarch.rpm	e560f77fa7419b9730d6f0b462c3c441	ELSA-2020-5020
	tomcat-javadoc-7.0.69-11.el7_3.noarch.rpm	d58779f357140f642ffd785afc166737	ELSA-2020-5020
	tomcat-jsp-2.2-api-7.0.69-11.el7_3.noarch.rpm	148c3b5c32d4b7f81cbb4e5d2fbf2dd7	ELSA-2020-5020
	tomcat-jsvc-7.0.69-11.el7_3.noarch.rpm	baaefe053a28cc479ffbd0185558040a	ELSA-2020-5020
	tomcat-lib-7.0.69-11.el7_3.noarch.rpm	8b4a77ffd1dfad007c7dae46273c979d	ELSA-2020-5020
	tomcat-servlet-3.0-api-7.0.69-11.el7_3.noarch.rpm	9cdd7a8d30b3af4bc0271b080f4038b9	ELSA-2020-5020
	tomcat-webapps-7.0.69-11.el7_3.noarch.rpm	9c67eb5249058955c8a48a38ddccf8a5	ELSA-2020-5020

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team