ALT-PU-2016-3269: package tomcat update to version 8.0.26-alt1_1jpp8
Описание
This update upgrades tomcat to version 8.0.26-alt1_1jpp8.
Устраненные уязвимости74
Ссылки40
GHSA-2rvv-w9r2-rg7m
https://github.com/advisories/GHSA-2rvv-w9r2-rg7mGHSA-344f-f5vg-2jfj
https://github.com/advisories/GHSA-344f-f5vg-2jfjGHSA-36qh-35cm-5w2w
https://github.com/advisories/GHSA-36qh-35cm-5w2wGHSA-3p5r-7cw3-2m67
https://github.com/advisories/GHSA-3p5r-7cw3-2m67GHSA-42j3-498q-m6vp
https://github.com/advisories/GHSA-42j3-498q-m6vpGHSA-475f-74wp-pqv5
https://github.com/advisories/GHSA-475f-74wp-pqv5GHSA-4c43-cwvx-9crh
https://github.com/advisories/GHSA-4c43-cwvx-9crhGHSA-5m62-pw8w-7w9f
https://github.com/advisories/GHSA-5m62-pw8w-7w9fGHSA-5mp6-jrq3-r938
https://github.com/advisories/GHSA-5mp6-jrq3-r938GHSA-5q99-f34m-67gc
https://github.com/advisories/GHSA-5q99-f34m-67gcGHSA-6m48-jxwx-76q7
https://github.com/advisories/GHSA-6m48-jxwx-76q7GHSA-87w9-x2c3-hrjj
https://github.com/advisories/GHSA-87w9-x2c3-hrjjGHSA-8qq4-8jvq-mfw4
https://github.com/advisories/GHSA-8qq4-8jvq-mfw4GHSA-8vmx-qmch-mpqg
https://github.com/advisories/GHSA-8vmx-qmch-mpqgGHSA-9m89-8frq-c98c
https://github.com/advisories/GHSA-9m89-8frq-c98cGHSA-9xcj-c8cr-8c3c
https://github.com/advisories/GHSA-9xcj-c8cr-8c3cGHSA-9xv2-5v5q-p794
https://github.com/advisories/GHSA-9xv2-5v5q-p794GHSA-c9hw-wf7x-jp9j
https://github.com/advisories/GHSA-c9hw-wf7x-jp9jGHSA-fv25-8xcx-gqjc
https://github.com/advisories/GHSA-fv25-8xcx-gqjcGHSA-gcx9-497g-6cp6
https://github.com/advisories/GHSA-gcx9-497g-6cp6GHSA-gx5v-xp9w-j4cg
https://github.com/advisories/GHSA-gx5v-xp9w-j4cgGHSA-h3x4-894j-xpx5
https://github.com/advisories/GHSA-h3x4-894j-xpx5GHSA-h6c8-x5r3-pm88
https://github.com/advisories/GHSA-h6c8-x5r3-pm88GHSA-h6fc-48rj-7qqh
https://github.com/advisories/GHSA-h6fc-48rj-7qqhGHSA-hh3j-x4mc-g48r
https://github.com/advisories/GHSA-hh3j-x4mc-g48rGHSA-j448-j653-r3vj
https://github.com/advisories/GHSA-j448-j653-r3vjGHSA-jgwr-3qm3-26f3
https://github.com/advisories/GHSA-jgwr-3qm3-26f3GHSA-jjpq-gp5q-8q6w
https://github.com/advisories/GHSA-jjpq-gp5q-8q6wGHSA-m7jv-hq7h-mq7c
https://github.com/advisories/GHSA-m7jv-hq7h-mq7cGHSA-pg42-rg8c-j886
https://github.com/advisories/GHSA-pg42-rg8c-j886GHSA-pjfr-qf3p-3q25
https://github.com/advisories/GHSA-pjfr-qf3p-3q25GHSA-prc3-7f44-w48j
https://github.com/advisories/GHSA-prc3-7f44-w48jGHSA-pxcx-cxq8-4mmw
https://github.com/advisories/GHSA-pxcx-cxq8-4mmwGHSA-qprx-q2r7-3rx6
https://github.com/advisories/GHSA-qprx-q2r7-3rx6GHSA-qxf4-chvg-4r8r
https://github.com/advisories/GHSA-qxf4-chvg-4r8rGHSA-v6c7-8qx5-8gmp
https://github.com/advisories/GHSA-v6c7-8qx5-8gmpGHSA-wq2p-q66w-q8gp
https://github.com/advisories/GHSA-wq2p-q66w-q8gpGHSA-xh5x-j8jf-pcpx
https://github.com/advisories/GHSA-xh5x-j8jf-pcpxGHSA-xx68-jfcg-xmmf
https://github.com/advisories/GHSA-xx68-jfcg-xmmfСвязанные уязвимости
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
Apache Tomcat through 7.0.x allows remote attackers to cause a denial ...
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."