Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:0539
HistoryFeb 12, 2024 - 8:16 p.m.

tomcat security update

2024-02-1220:16:50
Rockylinux Product Errata
errata.rockylinux.org
14
tomcat
security update
rocky linux 8
http request smuggling
vulnerability
cve-2023-46589
cvss score
servlet container
java

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

An update is available for tomcat.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

  • tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.