Oval Definition:	oval:com.redhat.rhsa:def:20150983
Revision Date: 2015-05-12 Version: 637 Title: RHSA-2015:0983: tomcat security update (Moderate) Description: Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service. (CVE-2014-0227) All Tomcat 7 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the tomcat service will be restarted automatically. Family: unix Class: patch Status: Reference(s): CVE-2014-0227 RHSA-2015:0983 RHSA-2015:0983-01 RHSA-2015:0983-02 Platform(s): Red Hat Enterprise Linux 7 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 7 is installed AND tomcat is earlier than 0:7.0.54-2.el7_1 AND tomcat is signed with Red Hat redhatrelease2 key tomcat-admin-webapps is earlier than 0:7.0.54-2.el7_1 AND tomcat-admin-webapps is signed with Red Hat redhatrelease2 key tomcat-docs-webapp is earlier than 0:7.0.54-2.el7_1 AND tomcat-docs-webapp is signed with Red Hat redhatrelease2 key tomcat-el-2.2-api is earlier than 0:7.0.54-2.el7_1 AND tomcat-el-2.2-api is signed with Red Hat redhatrelease2 key tomcat-javadoc is earlier than 0:7.0.54-2.el7_1 AND tomcat-javadoc is signed with Red Hat redhatrelease2 key tomcat-jsp-2.2-api is earlier than 0:7.0.54-2.el7_1 AND tomcat-jsp-2.2-api is signed with Red Hat redhatrelease2 key tomcat-jsvc is earlier than 0:7.0.54-2.el7_1 AND tomcat-jsvc is signed with Red Hat redhatrelease2 key tomcat-lib is earlier than 0:7.0.54-2.el7_1 AND tomcat-lib is signed with Red Hat redhatrelease2 key tomcat-servlet-3.0-api is earlier than 0:7.0.54-2.el7_1 AND tomcat-servlet-3.0-api is signed with Red Hat redhatrelease2 key tomcat-webapps is earlier than 0:7.0.54-2.el7_1 AND tomcat-webapps is signed with Red Hat redhatrelease2 key
BACK