ELSA-2023-5928

ELSA-2023-5928 - tomcat security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-10-24

Description

[1:9.0.62-5.2]
- HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
(CVE-2023-44487)

Related CVEs

CVE-2023-44487

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tomcat-9.0.62-5.el8_8.2.src.rpm	e48dfef9642d7f56be215c5d7b2c62cb	-	ol8_aarch64_appstream
	tomcat-9.0.62-5.el8_8.2.noarch.rpm	6c7bfd78bc24836cff1b2777c23b9dfe	-	ol8_aarch64_appstream
	tomcat-admin-webapps-9.0.62-5.el8_8.2.noarch.rpm	28b08cf75c948962e2e615ca9e1113ea	-	ol8_aarch64_appstream
	tomcat-docs-webapp-9.0.62-5.el8_8.2.noarch.rpm	3f2ecbea2f99247e4ed5c59e6589a32c	-	ol8_aarch64_appstream
	tomcat-el-3.0-api-9.0.62-5.el8_8.2.noarch.rpm	7533212516b4d925da1001cdc80bc374	-	ol8_aarch64_appstream
	tomcat-jsp-2.3-api-9.0.62-5.el8_8.2.noarch.rpm	e2a9ed6765e0fb56a208d4e49ea137b5	-	ol8_aarch64_appstream
	tomcat-lib-9.0.62-5.el8_8.2.noarch.rpm	72e202251e469eb8f2dc00b592cffb13	-	ol8_aarch64_appstream
	tomcat-servlet-4.0-api-9.0.62-5.el8_8.2.noarch.rpm	9368227ad1915069d2449d925504355a	-	ol8_aarch64_appstream
	tomcat-webapps-9.0.62-5.el8_8.2.noarch.rpm	fc9a03c11b919c86db828e068897dc47	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	tomcat-9.0.62-5.el8_8.2.src.rpm	e48dfef9642d7f56be215c5d7b2c62cb	-	ol8_x86_64_appstream
	tomcat-9.0.62-5.el8_8.2.noarch.rpm	6c7bfd78bc24836cff1b2777c23b9dfe	-	ol8_x86_64_appstream
	tomcat-admin-webapps-9.0.62-5.el8_8.2.noarch.rpm	28b08cf75c948962e2e615ca9e1113ea	-	ol8_x86_64_appstream
	tomcat-docs-webapp-9.0.62-5.el8_8.2.noarch.rpm	3f2ecbea2f99247e4ed5c59e6589a32c	-	ol8_x86_64_appstream
	tomcat-el-3.0-api-9.0.62-5.el8_8.2.noarch.rpm	7533212516b4d925da1001cdc80bc374	-	ol8_x86_64_appstream
	tomcat-jsp-2.3-api-9.0.62-5.el8_8.2.noarch.rpm	e2a9ed6765e0fb56a208d4e49ea137b5	-	ol8_x86_64_appstream
	tomcat-lib-9.0.62-5.el8_8.2.noarch.rpm	72e202251e469eb8f2dc00b592cffb13	-	ol8_x86_64_appstream
	tomcat-servlet-4.0-api-9.0.62-5.el8_8.2.noarch.rpm	9368227ad1915069d2449d925504355a	-	ol8_x86_64_appstream
	tomcat-webapps-9.0.62-5.el8_8.2.noarch.rpm	fc9a03c11b919c86db828e068897dc47	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team