Lucene search
DebianDEBIAN:DLA-924-2:C1101HistoryMay 10, 2017 - 8:08 p.m.
[SECURITY] [DLA 924-2] tomcat7 regression update
2017-05-1020:08:15
lists.debian.org
11
Package : tomcat7
Version : 7.0.28-4+deb7u13
Debian Bug : 861872
The security update announced as DLA-924-1 introduced a regression in
Tomcat's APR protocol due to the fix for CVE-2017-5647 and prevented a
successful sendfile request.
For Debian 7 "Wheezy", these problems have been fixed in version
7.0.28-4+deb7u13.
We recommend that you upgrade your tomcat7 packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 7 | all | tomcat7-examples | < 7.0.28-4+deb7u13 | tomcat7-examples_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | tomcat7-common | < 7.0.28-4+deb7u13 | tomcat7-common_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | libtomcat7-java | < 7.0.28-4+deb7u13 | libtomcat7-java_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | tomcat7-admin | < 7.0.28-4+deb7u13 | tomcat7-admin_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | tomcat7 | < 7.0.28-4+deb7u13 | tomcat7_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | libservlet3.0-java | < 7.0.28-4+deb7u13 | libservlet3.0-java_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | tomcat7-user | < 7.0.28-4+deb7u13 | tomcat7-user_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | tomcat7-docs | < 7.0.28-4+deb7u13 | tomcat7-docs_7.0.28-4+deb7u13_all.deb |
| Debian | 7 | all | libservlet3.0-java-doc | < 7.0.28-4+deb7u13 | libservlet3.0-java-doc_7.0.28-4+deb7u13_all.deb |
Related
ubuntucve
ubuntucve
CVE-2017-5647
2017-04-17 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.77
2017-04-02 00:00:00
Fixed in Apache Tomcat 6.0.53
2017-04-07 00:00:00
Fixed in Apache Tomcat 8.0.43
2017-04-02 00:00:00
cve
cve
CVE-2017-5647
2017-04-17 16:59:00
ibm
ibm
prion
prion
Server side request forgery (ssrf)
2017-04-17 16:59:00
veracode
veracode
Information Disclosure
2017-04-11 05:42:07
openvas
openvas
Apache Tomcat 'pipelined' Requests Information Disclosure Vulnerability - Windows
2017-04-21 00:00:00
Debian Security Advisory DSA 3843-1 (tomcat8 - security update)
2017-05-03 00:00:00
amazon
amazon
Important: tomcat6
2017-04-20 06:17:00
Important: tomcat7, tomcat8
2017-04-20 06:18:00
debiancve
debiancve
CVE-2017-5647
2017-04-17 16:59:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-14 01:10:16
f5
f5
K49000195 : Apache Tomcat vulnerability CVE-2017-5647
2017-05-05 00:00:00
redhatcve
redhatcve
CVE-2017-5647
2017-04-11 12:48:12
nessus
nessus
Debian DLA-924-2 : tomcat7 regression update
2017-05-01 00:00:00
Amazon Linux AMI : tomcat6 (ALAS-2017-821)
2017-04-21 00:00:00
osv
osv
CVE-2017-5647
2017-04-17 16:59:00
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-14 01:10:16
tomcat7 - security update
2017-05-03 00:00:00
debian
debian
[SECURITY] [DLA 924-1] tomcat7 security update
2017-04-28 21:59:13
[SECURITY] [DSA 3843-1] tomcat8 security update
2017-05-03 06:04:53
[SECURITY] [DSA 3842-1] tomcat7 security update
2017-05-03 06:04:50
mageia
mageia
Updated tomcat packages fix security vulnerability
2017-04-28 01:21:29
suse
suse
Security update for tomcat (important)
2017-05-10 18:10:03
Security update for tomcat (important)
2017-05-23 21:11:53
Security update for tomcat (important)
2017-05-15 21:24:34
oraclelinux
oraclelinux
tomcat security update
2017-07-27 00:00:00
tomcat6 security update
2017-10-29 00:00:00
tomcat security update
2017-10-30 00:00:00
redhat
redhat
(RHSA-2017:3080) Important: tomcat6 security update
2017-10-29 22:35:53
(RHSA-2017:2493) Important: Red Hat JBoss Web Server 2 security update
2017-08-21 15:21:19
(RHSA-2017:3081) Important: tomcat security update
2017-10-29 22:36:17
centos
centos
tomcat security update
2017-10-30 11:36:20
tomcat6 security update
2017-10-30 11:27:14
ubuntu
ubuntu
Tomcat vulnerabilities
2018-01-08 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: tomcat-8.0.43-1.fc25
2017-04-27 19:54:29
[SECURITY] Fedora 26 Update: tomcat-8.0.43-1.fc26
2017-04-27 20:56:01
[SECURITY] Fedora 24 Update: tomcat-8.0.43-1.fc24
2017-04-27 20:51:20
atlassian
atlassian
Upgrade Tomcat to the version 8.5.29
2017-03-14 13:20:53
Upgrade Tomcat to the version 8.5.29
2017-03-14 13:20:53
Update bundled Apache Tomcat due to security vulnerabilities
2017-04-17 08:48:35
symantec
symantec
SA156: Apache Tomcat Vulnerabilities Apr-Oct 2017
2017-11-07 08:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2017-05-18 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
Related for DEBIAN:DLA-924-2:C1101