< back to search

shield Security update for tomcat6
slessp4-tomcat6-12092

This update for Tomcat fixes the following security issues: - CVE-2014-7810: Security manager bypass via EL expressions. (bsc#931442) It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could have used this flaw to bypass security manager protections. - CVE-2014-0227: Limited DoS in chunked transfer encoding input filter. (bsc#917127) It was discovered that the ChunkedInputFilter implementation did not fail subsequent attempts to read input early enough. A remote attacker could have used this flaw to perform a denial of service attack, by streaming an unlimited quantity of data, leading to consumption of server resources. - CVE-2014-0230: Non-persistent DoS attack by feeding data by aborting an upload It was possible for a remote attacker to trigger a non-persistent DoS attack by feeding data by aborting an upload. (bsc#926762) Additionally, the following non-security issues have been fixed: - Fix rights of all files within /usr/share/tomcat6/bin. (bsc#906152) - Don't overwrite /var/run/tomcat6.pid when Tomcat is already running. (bsc#934219) - Miscellaneous fixes and improvements to Tomcat's init script. (bsc#932698)

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.41-0.47.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.41-0.47.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.41-0.47.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.41-0.47.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.41-0.47.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.41-0.47.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
SUSE Linux Enterprise Server 11.4 i586
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.41-0.47.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.41-0.47.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.41-0.47.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.41-0.47.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.41-0.47.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.41-0.47.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.41-0.47.1 lock rpm