ELSA-2012-0474

ELSA-2012-0474 - tomcat5 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2012-04-11

Description

[0:5.5.23-0jpp.31]
- Resolves: CVE-2012 regression. Changed patch file.

[0:5.5.23-0jpp.30]
- Resolves: CVE-2012-0022, CVE-2011-4858

[0:5.5.23-0jpp.27]
- Resolves CVE-2011-0013 rhbz 675933
- Resolves CVE-2011-3718 rhbz 675933

[0:5.5.23-0jpp.23]
- Resolves CVE-2011-1184 rhbz 744984
- Resolves CVE-2011-2204 rhbz 719188

Related CVEs

CVE-2011-4858

CVE-2012-0022

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_i386_latest
	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-5.5.23-0jpp.31.el5_8.i386.rpm	b14e912ac9cec0a5188a750140348c39d67c0097dc4ce2c995cae00630b67ab7	ELSA-2013-0870	ol5_i386_latest
	tomcat5-5.5.23-0jpp.31.el5_8.i386.rpm	b14e912ac9cec0a5188a750140348c39d67c0097dc4ce2c995cae00630b67ab7	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.i386.rpm	0b51c0c72166895ad4a1e042b7cf1bd9b36ed3f6a9fc2fc651136f3865087a51	ELSA-2013-0870	ol5_i386_latest
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.i386.rpm	0b51c0c72166895ad4a1e042b7cf1bd9b36ed3f6a9fc2fc651136f3865087a51	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.i386.rpm	16421fd1501f4811719ba02c1f3577bbdb66253ecb8986706850a688cd27a20b	ELSA-2013-0870	ol5_i386_latest
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.i386.rpm	16421fd1501f4811719ba02c1f3577bbdb66253ecb8986706850a688cd27a20b	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.i386.rpm	5b17895c8e01f2734d5052c08f61e69b847153240b40ec0bac0fbe9d632c7755	ELSA-2013-0870	ol5_i386_latest
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.i386.rpm	5b17895c8e01f2734d5052c08f61e69b847153240b40ec0bac0fbe9d632c7755	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	87e3207d6ec1fbe5fd7a685ed0d27fe1eb7ad2a1cbf48f6dc4b8b4b3f8f7ef76	ELSA-2013-0870	ol5_i386_latest
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	87e3207d6ec1fbe5fd7a685ed0d27fe1eb7ad2a1cbf48f6dc4b8b4b3f8f7ef76	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.i386.rpm	5f2365c4628102686037ce5b04c44984abbe401652dfcd370b57dcae6de4b128	ELSA-2013-0870	ol5_i386_latest
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.i386.rpm	5f2365c4628102686037ce5b04c44984abbe401652dfcd370b57dcae6de4b128	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	25c1363334846ec10d9aefd9427a23775491e2850e7aa11eefbc89d46b15fd30	ELSA-2013-0870	ol5_i386_latest
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	25c1363334846ec10d9aefd9427a23775491e2850e7aa11eefbc89d46b15fd30	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.i386.rpm	fbca1ff7a2f80557b21d1be39b30c1c7da1d1f588a90e64022bb3bf5519607d0	ELSA-2013-0870	ol5_i386_latest
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.i386.rpm	fbca1ff7a2f80557b21d1be39b30c1c7da1d1f588a90e64022bb3bf5519607d0	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.i386.rpm	8203b6ce355c5151f0ecb98b5bfe263191822ac7e36d01284ec9a59a5b4f26cb	ELSA-2013-0870	ol5_i386_latest
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.i386.rpm	8203b6ce355c5151f0ecb98b5bfe263191822ac7e36d01284ec9a59a5b4f26cb	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	cb40506a40e7b62075332c943bc3e2e6923b48ba26765caa4966e203e4ea3399	ELSA-2013-0870	ol5_i386_latest
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.i386.rpm	cb40506a40e7b62075332c943bc3e2e6923b48ba26765caa4966e203e4ea3399	ELSA-2013-0870	ol5_u8_i386_patch
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.i386.rpm	e615314003705599496282cefda6b142245e784ebde86c000202ef65ab84b608	ELSA-2013-0870	ol5_i386_latest
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.i386.rpm	e615314003705599496282cefda6b142245e784ebde86c000202ef65ab84b608	ELSA-2013-0870	ol5_u8_i386_patch
Oracle Linux 5 (ia64)	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-5.5.23-0jpp.31.el5_8.ia64.rpm	b31c2f4bb6d57b29caa3142bf465c67db0183ea726b0ce4cc89579ac580ebe7c	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-5.5.23-0jpp.31.el5_8.ia64.rpm	b31c2f4bb6d57b29caa3142bf465c67db0183ea726b0ce4cc89579ac580ebe7c	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.ia64.rpm	1dd8190044abb5424ce5c04891069bdab8813ed04833c6445db081c261b1d2ea	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.ia64.rpm	1dd8190044abb5424ce5c04891069bdab8813ed04833c6445db081c261b1d2ea	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.ia64.rpm	3b87502106edf9783281264180b487f8c938bf5ec739fa26890d0597551ddb9f	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.ia64.rpm	3b87502106edf9783281264180b487f8c938bf5ec739fa26890d0597551ddb9f	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.ia64.rpm	5541427a5dc38972cf7e7b2056fe95dd9e1c3422b4af466d818c52aa69b30ecb	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.ia64.rpm	5541427a5dc38972cf7e7b2056fe95dd9e1c3422b4af466d818c52aa69b30ecb	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	2139b7003dfd4790c75132f646417e9f87dd26d055ee3461c0caa9097c2f6977	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	2139b7003dfd4790c75132f646417e9f87dd26d055ee3461c0caa9097c2f6977	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.ia64.rpm	0c56a0fb2557c100bb1f1d6a6c64e396eeac7af1f65f629b29cdecc2344281de	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.ia64.rpm	0c56a0fb2557c100bb1f1d6a6c64e396eeac7af1f65f629b29cdecc2344281de	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	58c384bca7dbbaccd6e54674956f2283ddbaeb2d9fa97e4469bf1a4e625a848f	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	58c384bca7dbbaccd6e54674956f2283ddbaeb2d9fa97e4469bf1a4e625a848f	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.ia64.rpm	a29954237f2dbc02e30db424836c15335f4f52d9bd385d708e13fc59d06e3964	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.ia64.rpm	a29954237f2dbc02e30db424836c15335f4f52d9bd385d708e13fc59d06e3964	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.ia64.rpm	20b5311801287f5d97179c67c15404de3c6d10d89c55061099e2d3351ece867e	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.ia64.rpm	20b5311801287f5d97179c67c15404de3c6d10d89c55061099e2d3351ece867e	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	46fbcf1a0a3580db9b173770abeef4aba871357bac12b1d1718317c2483e31e5	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.ia64.rpm	46fbcf1a0a3580db9b173770abeef4aba871357bac12b1d1718317c2483e31e5	ELSA-2013-0870	ol5_u8_ia64_patch
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.ia64.rpm	153a71774f263fef6aa4c20be7c8d3e84db1667e01a5d6957746db8c73a928c6	ELSA-2013-0870	ol5_ia64_latest
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.ia64.rpm	153a71774f263fef6aa4c20be7c8d3e84db1667e01a5d6957746db8c73a928c6	ELSA-2013-0870	ol5_u8_ia64_patch
Oracle Linux 5 (x86_64)	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-5.5.23-0jpp.31.el5_8.src.rpm	4e5557c243baa26eafca6cddd230254397d79e02e8fc7806cb119cf7ba2142c1	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-5.5.23-0jpp.31.el5_8.x86_64.rpm	92c660f513f4080e457db05c9af3c7336f2fbf568827015934aeec968a379b66	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-5.5.23-0jpp.31.el5_8.x86_64.rpm	92c660f513f4080e457db05c9af3c7336f2fbf568827015934aeec968a379b66	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.x86_64.rpm	fb5432851e42d8dcfdb4558083cf4c4f568b7904bab709e9852231f19f9f4a3e	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8.x86_64.rpm	fb5432851e42d8dcfdb4558083cf4c4f568b7904bab709e9852231f19f9f4a3e	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.x86_64.rpm	df37e479be6e07b0f5374cfc0bab528e13dba6ee624681f34f10a061e4ca8306	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-common-lib-5.5.23-0jpp.31.el5_8.x86_64.rpm	df37e479be6e07b0f5374cfc0bab528e13dba6ee624681f34f10a061e4ca8306	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.x86_64.rpm	7662c76e98828c4620e7479bbe669840ce232bd46dc76b7177bd559c9107fc1c	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-jasper-5.5.23-0jpp.31.el5_8.x86_64.rpm	7662c76e98828c4620e7479bbe669840ce232bd46dc76b7177bd559c9107fc1c	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	a7cba87f67dface4886a3c96a3361a1dfca8e04a9a9796bbdd0f0737e71599e7	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-jasper-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	a7cba87f67dface4886a3c96a3361a1dfca8e04a9a9796bbdd0f0737e71599e7	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.x86_64.rpm	a73001fe2090defe9764ca71a2e49746230f6154750b4a1aae3c9316169ad58b	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.x86_64.rpm	a73001fe2090defe9764ca71a2e49746230f6154750b4a1aae3c9316169ad58b	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	0ae39f2ac7cb0eca3ffb5bd193f200b2e0cf8f738c8c641dad2e3ead1c52587a	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	0ae39f2ac7cb0eca3ffb5bd193f200b2e0cf8f738c8c641dad2e3ead1c52587a	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.x86_64.rpm	c4e6b20c1d5bdcde0129c33558059ea8199e03569a21278dd1ba1ddcc0bbb4d4	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-server-lib-5.5.23-0jpp.31.el5_8.x86_64.rpm	c4e6b20c1d5bdcde0129c33558059ea8199e03569a21278dd1ba1ddcc0bbb4d4	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.x86_64.rpm	d8cbf4ae77a9ead3b88d829733c8c922a9face8275c5f8307ac81184226e6e39	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-servlet-2.4-api-5.5.23-0jpp.31.el5_8.x86_64.rpm	d8cbf4ae77a9ead3b88d829733c8c922a9face8275c5f8307ac81184226e6e39	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	b3ce94bd4866f8eb1d305ad8641f5488c54f99eb8bc91f70f69e3c91d56272fb	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.31.el5_8.x86_64.rpm	b3ce94bd4866f8eb1d305ad8641f5488c54f99eb8bc91f70f69e3c91d56272fb	ELSA-2013-0870	ol5_x86_64_latest
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.x86_64.rpm	4255a6935323629f4adfd25c70d3bdb45a847109b6c934844c0d4bf3a0fec5fb	ELSA-2013-0870	ol5_u8_x86_64_patch
	tomcat5-webapps-5.5.23-0jpp.31.el5_8.x86_64.rpm	4255a6935323629f4adfd25c70d3bdb45a847109b6c934844c0d4bf3a0fec5fb	ELSA-2013-0870	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team