4 matches found
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.98 Fixed CVEs: CVE-2024-54677: DoS in examples web application bsc1234664 CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation bsc1234663 CVE-2024-52317: Request/response mix-up with HTTP/2 bsc1233435 Catalina Add: Add...
Fedora 41 : tomcat (2024-2cb3145f8d)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2cb3145f8d advisory. Automatic update for tomcat-9.0.98-1.fc41. Changelog for tomcat Mon Dec 09 2024 Packit - 1:9.0.98-1 - Update to version 9.0.98 - Resolves: rhbz2331168 Mon De...
Fedora 40 : tomcat (2024-2a31fce8eb)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2a31fce8eb advisory. Automatic update for tomcat-9.0.98-1.fc40. Changelog for tomcat Mon Dec 09 2024 Packit - 1:9.0.98-1 - Update to version 9.0.98 - Resolves: rhbz2331168 Mon De...
GHSA-5J33-CVVR-W245 Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from...