Oracle alert ELSA-2024-3666 (tomcat)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2024-3666 Important: Oracle Linux 8 tomcat security and bug fix update | |
| Date: | Thu, 06 Jun 2024 21:59:03 -0700 | |
| Message-ID: | <mailman.516.1717736353.4813.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2024-3666 http://linux.oracle.com/errata/ELSA-2024-3666.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: tomcat-9.0.87-1.el8_10.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el8_10.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el8_10.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-lib-9.0.87-1.el8_10.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-webapps-9.0.87-1.el8_10.1.noarch.rpm aarch64: tomcat-9.0.87-1.el8_10.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el8_10.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el8_10.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-lib-9.0.87-1.el8_10.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el8_10.1.noarch.rpm tomcat-webapps-9.0.87-1.el8_10.1.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//tomcat-9.0.87-1.... Related CVEs: CVE-2024-23672 CVE-2024-24549 Description of changes: [1:9.0.87-1.el8_10.1] - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29255 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29250 tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata