Oracle alert ELSA-2016-2045 (tomcat6)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2016-2045 Important: Oracle Linux 6 tomcat6 security and bug fix update | |
| Date: | Mon, 10 Oct 2016 22:20:00 -0700 | |
| Message-ID: | <57FC7680.6080303@oracle.com> |
Oracle Linux Security Advisory ELSA-2016-2045 http://linux.oracle.com/errata/ELSA-2016-2045.html The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network: i386: tomcat6-6.0.24-98.el6_8.noarch.rpm tomcat6-admin-webapps-6.0.24-98.el6_8.noarch.rpm tomcat6-docs-webapp-6.0.24-98.el6_8.noarch.rpm tomcat6-el-2.1-api-6.0.24-98.el6_8.noarch.rpm tomcat6-javadoc-6.0.24-98.el6_8.noarch.rpm tomcat6-jsp-2.1-api-6.0.24-98.el6_8.noarch.rpm tomcat6-lib-6.0.24-98.el6_8.noarch.rpm tomcat6-servlet-2.5-api-6.0.24-98.el6_8.noarch.rpm tomcat6-webapps-6.0.24-98.el6_8.noarch.rpm x86_64: tomcat6-6.0.24-98.el6_8.noarch.rpm tomcat6-admin-webapps-6.0.24-98.el6_8.noarch.rpm tomcat6-docs-webapp-6.0.24-98.el6_8.noarch.rpm tomcat6-el-2.1-api-6.0.24-98.el6_8.noarch.rpm tomcat6-javadoc-6.0.24-98.el6_8.noarch.rpm tomcat6-jsp-2.1-api-6.0.24-98.el6_8.noarch.rpm tomcat6-lib-6.0.24-98.el6_8.noarch.rpm tomcat6-servlet-2.5-api-6.0.24-98.el6_8.noarch.rpm tomcat6-webapps-6.0.24-98.el6_8.noarch.rpm SRPMS: http://oss.oracle.com/ol6/SRPMS-updates/tomcat6-6.0.24-98... Description of changes: [0:6.0.24-98] - Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - Resolves: rhbz#1368119 [0:6.0.24-97] - Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue - Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet - Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms - Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure [0:6.0.24-96] - Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata