ELSA-2023-5929

ELSA-2023-5929 - tomcat security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-10-23

Description

[1:9.0.62-11.3]
- HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
(CVE-2023-44487)

Related CVEs

CVE-2023-44487

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tomcat-9.0.62-11.el9_2.3.src.rpm	0a8292a3464ddd40bd43d899559e65a8	-	ol9_aarch64_appstream
	tomcat-9.0.62-11.el9_2.3.noarch.rpm	6f388140ac8058ca8379391ee1a80de3	-	ol9_aarch64_appstream
	tomcat-admin-webapps-9.0.62-11.el9_2.3.noarch.rpm	0ec620636df074c1328ffea1c243c834	-	ol9_aarch64_appstream
	tomcat-docs-webapp-9.0.62-11.el9_2.3.noarch.rpm	b0b1d0429eed04b890d3fc4f6240019d	-	ol9_aarch64_appstream
	tomcat-el-3.0-api-9.0.62-11.el9_2.3.noarch.rpm	dd30f79284a134c07a1daf7f411cf14b	-	ol9_aarch64_appstream
	tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.noarch.rpm	d65bc6ce06e551752a474228a1384c65	-	ol9_aarch64_appstream
	tomcat-lib-9.0.62-11.el9_2.3.noarch.rpm	b81102f6ae62cba1b76e66893db1e220	-	ol9_aarch64_appstream
	tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.noarch.rpm	c146b2df18247d19866c040bb9018516	-	ol9_aarch64_appstream
	tomcat-webapps-9.0.62-11.el9_2.3.noarch.rpm	9f58664d0957662f5725dd8b102a5dca	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tomcat-9.0.62-11.el9_2.3.src.rpm	0a8292a3464ddd40bd43d899559e65a8	-	ol9_x86_64_appstream
	tomcat-9.0.62-11.el9_2.3.noarch.rpm	6f388140ac8058ca8379391ee1a80de3	-	ol9_x86_64_appstream
	tomcat-admin-webapps-9.0.62-11.el9_2.3.noarch.rpm	0ec620636df074c1328ffea1c243c834	-	ol9_x86_64_appstream
	tomcat-docs-webapp-9.0.62-11.el9_2.3.noarch.rpm	b0b1d0429eed04b890d3fc4f6240019d	-	ol9_x86_64_appstream
	tomcat-el-3.0-api-9.0.62-11.el9_2.3.noarch.rpm	dd30f79284a134c07a1daf7f411cf14b	-	ol9_x86_64_appstream
	tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.noarch.rpm	d65bc6ce06e551752a474228a1384c65	-	ol9_x86_64_appstream
	tomcat-lib-9.0.62-11.el9_2.3.noarch.rpm	b81102f6ae62cba1b76e66893db1e220	-	ol9_x86_64_appstream
	tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.noarch.rpm	c146b2df18247d19866c040bb9018516	-	ol9_x86_64_appstream
	tomcat-webapps-9.0.62-11.el9_2.3.noarch.rpm	9f58664d0957662f5725dd8b102a5dca	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team