Oracle alert ELSA-2024-3307 (tomcat)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2024-3307 Important: Oracle Linux 9 tomcat security and bug fix update | |
| Date: | Mon, 27 May 2024 05:59:49 -0700 | |
| Message-ID: | <mailman.347.1716814797.4813.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2024-3307 http://linux.oracle.com/errata/ELSA-2024-3307.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: tomcat-9.0.87-1.el9_4.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm aarch64: tomcat-9.0.87-1.el9_4.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//tomcat-9.0.87-1.... Related CVEs: CVE-2024-23672 CVE-2024-24549 Description of changes: [1:9.0.87-1.el9_4.1] - Resolves: RHEL-34815 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-31048 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-31032 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-35328 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata