Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2007-0327

Опубликовано: 26 июн. 2007
Источник: oracle-oval
Платформа: Oracle Linux 5

Описание

ELSA-2007-0327: Important: tomcat security update (IMPORTANT)

jakarta-commons-modeler-1.1-8jpp.1.0.2.el5

[1.1-8jpp.1.0.2.el5]

  • rebuild after the fix for bug 238139 made it into the build root
  • Resolves: bug 238694

[1.1-8jpp.1.0.1.el5]

  • Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23 to build against j-c-modeler
  • Resolves: bug 238694

tomcat5-5.5.23-0jpp.1.0.3.el5

[5.5.23-0jpp.1.0.3.el5]

  • Rebuild since brp-repack-jars has been fixed to not mangle INDEX.LIST files - (bug 238139)
  • Resolves: bug 237089

[5.5.23-0jpp.1.0.2.el5]

  • Add catalina.out to the rpm and set explicit permissions; tomcat ownership
  • Resolves: bug 237089

[5.5.23-0jpp.1.0.1.el5]

  • Backport 0:5.5.23-0jpp.2.el5 to the Z-stream
  • Resolves: bug 237089

[5.5.23-0jpp.1]

  • Merge 0:5.5.17-8jpp.2 with sources/patches from 5.5.23
  • Build against jakarta-commons-modeler 1.1 with MODELER-15 patch

Обновленные пакеты

Oracle Linux 5

Oracle Linux x86_64

jakarta-commons-modeler

1.1-8jpp.1.0.2.el5

jakarta-commons-modeler-javadoc

1.1-8jpp.1.0.2.el5

tomcat5

5.5.23-0jpp.1.0.3.el5

tomcat5-admin-webapps

5.5.23-0jpp.1.0.3.el5

tomcat5-common-lib

5.5.23-0jpp.1.0.3.el5

tomcat5-jasper

5.5.23-0jpp.1.0.3.el5

tomcat5-jasper-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-jsp-2.0-api

5.5.23-0jpp.1.0.3.el5

tomcat5-jsp-2.0-api-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-server-lib

5.5.23-0jpp.1.0.3.el5

tomcat5-servlet-2.4-api

5.5.23-0jpp.1.0.3.el5

tomcat5-servlet-2.4-api-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-webapps

5.5.23-0jpp.1.0.3.el5

Oracle Linux i386

jakarta-commons-modeler

1.1-8jpp.1.0.2.el5

jakarta-commons-modeler-javadoc

1.1-8jpp.1.0.2.el5

tomcat5

5.5.23-0jpp.1.0.3.el5

tomcat5-admin-webapps

5.5.23-0jpp.1.0.3.el5

tomcat5-common-lib

5.5.23-0jpp.1.0.3.el5

tomcat5-jasper

5.5.23-0jpp.1.0.3.el5

tomcat5-jasper-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-jsp-2.0-api

5.5.23-0jpp.1.0.3.el5

tomcat5-jsp-2.0-api-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-server-lib

5.5.23-0jpp.1.0.3.el5

tomcat5-servlet-2.4-api

5.5.23-0jpp.1.0.3.el5

tomcat5-servlet-2.4-api-javadoc

5.5.23-0jpp.1.0.3.el5

tomcat5-webapps

5.5.23-0jpp.1.0.3.el5

Связанные уязвимости

ubuntu
около 18 лет назад

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

redhat
около 18 лет назад

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

nvd
около 18 лет назад

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

debian
около 18 лет назад

Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Ap ...

github
около 3 лет назад

Apache Tomcat XSS Vulnerability