Fixed packages 40
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-admin-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-docs-webapp | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-el-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-javadoc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-jsp-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-jsvc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-lib | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-servlet-3.0-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tomcat-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-admin-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-docs-webapp | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-el-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-javadoc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-jsp-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-jsvc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-lib | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-servlet-3.0-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tomcat-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-admin-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-docs-webapp | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-el-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-javadoc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-jsp-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-jsvc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-lib | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-servlet-3.0-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tomcat-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-admin-webapps | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-docs-webapp | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-el-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-javadoc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-jsp-2.2-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-jsvc | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-lib | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-servlet-3.0-api | 0:7.0.42-8.el7_0 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tomcat-webapps | 0:7.0.42-8.el7_0 |
Vulnerabilities 1
-
Medium —
Missing XML Validation in Apache Tomcat
Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web applicatio…
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
article
https://tomcat.apache.org/security-6.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1102038
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1034.json
-
report
https://access.redhat.com/security/cve/CVE-2014-0119
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-0119
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-0119