Описание
ELSA-2024-0125: tomcat security update (MODERATE)
[1:9.0.62-27.2]
- Open Redirect vulnerability in FORM authentication (CVE-2023-41080)
- FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
- improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
- incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
tomcat
9.0.62-27.el8_9.2
tomcat-admin-webapps
9.0.62-27.el8_9.2
tomcat-docs-webapp
9.0.62-27.el8_9.2
tomcat-el-3.0-api
9.0.62-27.el8_9.2
tomcat-jsp-2.3-api
9.0.62-27.el8_9.2
tomcat-lib
9.0.62-27.el8_9.2
tomcat-servlet-4.0-api
9.0.62-27.el8_9.2
tomcat-webapps
9.0.62-27.el8_9.2
Oracle Linux x86_64
tomcat
9.0.62-27.el8_9.2
tomcat-admin-webapps
9.0.62-27.el8_9.2
tomcat-docs-webapp
9.0.62-27.el8_9.2
tomcat-el-3.0-api
9.0.62-27.el8_9.2
tomcat-jsp-2.3-api
9.0.62-27.el8_9.2
tomcat-lib
9.0.62-27.el8_9.2
tomcat-servlet-4.0-api
9.0.62-27.el8_9.2
tomcat-webapps
9.0.62-27.el8_9.2
