ELSA-2017-0935

ELSA-2017-0935 - tomcat security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-04-12

Description

[0:7.0.69-11]
- Resolves: rhbz#1413591 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402662 CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests

Related CVEs

CVE-2016-8745

CVE-2016-6816

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	tomcat-7.0.69-11.el7_3.src.rpm	3ca6cc446665fb8c927e8ff19fe6113b3755ef400dc4d00b2b2d44b6fc2f90e3	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-7.0.69-11.el7_3.src.rpm	3ca6cc446665fb8c927e8ff19fe6113b3755ef400dc4d00b2b2d44b6fc2f90e3	ELSA-2020-5020	ol7_x86_64_optional_archive
	tomcat-7.0.69-11.el7_3.src.rpm	3ca6cc446665fb8c927e8ff19fe6113b3755ef400dc4d00b2b2d44b6fc2f90e3	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-7.0.69-11.el7_3.noarch.rpm	fc9d76ffe9d02d83887ab1b91ae8013f0b15507ee6459fdb8336b8f347725294	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-7.0.69-11.el7_3.noarch.rpm	fc9d76ffe9d02d83887ab1b91ae8013f0b15507ee6459fdb8336b8f347725294	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-admin-webapps-7.0.69-11.el7_3.noarch.rpm	764c83dbd773cddabd4e0687550948b8131499e5ac29233dbe3e9bfcf23c23f8	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-admin-webapps-7.0.69-11.el7_3.noarch.rpm	764c83dbd773cddabd4e0687550948b8131499e5ac29233dbe3e9bfcf23c23f8	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-docs-webapp-7.0.69-11.el7_3.noarch.rpm	ad8d27ae1943391af24aad45ee3def4f5bb88d31097c42232664881b6046576f	ELSA-2020-5020	ol7_x86_64_optional_archive
	tomcat-el-2.2-api-7.0.69-11.el7_3.noarch.rpm	6facc80e37efe8115e8bb6055790c3d08f3b863eaa6f0e9350c464b4eef8b022	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-el-2.2-api-7.0.69-11.el7_3.noarch.rpm	6facc80e37efe8115e8bb6055790c3d08f3b863eaa6f0e9350c464b4eef8b022	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-javadoc-7.0.69-11.el7_3.noarch.rpm	a0fd8acd624702df0869eb38592e5c0f46f4a1fc5178fe131b1e516939a59f60	ELSA-2020-5020	ol7_x86_64_optional_archive
	tomcat-jsp-2.2-api-7.0.69-11.el7_3.noarch.rpm	44a0717ac7d79e46983b736704fb2055159a72226d44cadedb0558d802662fbf	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-jsp-2.2-api-7.0.69-11.el7_3.noarch.rpm	44a0717ac7d79e46983b736704fb2055159a72226d44cadedb0558d802662fbf	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-jsvc-7.0.69-11.el7_3.noarch.rpm	cf5d1c11187745b0aa0e633cbac545cac32c18df7febdd5f17c94db48b5a57ab	ELSA-2020-5020	ol7_x86_64_optional_archive
	tomcat-lib-7.0.69-11.el7_3.noarch.rpm	251d9205a08ec91f8874c3cc1260f40afb9ed74850d7ade6cf29b8af8987b065	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-lib-7.0.69-11.el7_3.noarch.rpm	251d9205a08ec91f8874c3cc1260f40afb9ed74850d7ade6cf29b8af8987b065	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-servlet-3.0-api-7.0.69-11.el7_3.noarch.rpm	96cce6a1f8637dcc36f26b573ce0d00f79ed2cf23c463056ecbffe2f60c9c2c3	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-servlet-3.0-api-7.0.69-11.el7_3.noarch.rpm	96cce6a1f8637dcc36f26b573ce0d00f79ed2cf23c463056ecbffe2f60c9c2c3	ELSA-2020-5020	ol7_x86_64_u3_patch
	tomcat-webapps-7.0.69-11.el7_3.noarch.rpm	60a767a711d69c4b27a7c2cee76cb58255b1d643521c25d4014cad250bb10dc1	ELSA-2020-5020	ol7_x86_64_latest_archive
	tomcat-webapps-7.0.69-11.el7_3.noarch.rpm	60a767a711d69c4b27a7c2cee76cb58255b1d643521c25d4014cad250bb10dc1	ELSA-2020-5020	ol7_x86_64_u3_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team