< back to search

gpp_maybe Security update for tomcat6
slessp4-tomcat6-12465

This update for tomcat6 fixes the following issues: The version was updated from 6.0.41 to 6.0.45. Security issues fixed: * CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory. (bsc#967967) * CVE-2015-5345: The Mapper component in Apache Tomcat processes redirects before considering security constraints and Filters, which allowed remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character. (bsc#967965) * CVE-2016-0706: Apache Tomcat did not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allowed remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application. (bsc#967815) * CVE-2016-0714: The session-persistence implementation in Apache Tomcat mishandled session attributes, which allowed remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. (bsc#967964)

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.45-0.50.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.45-0.50.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.45-0.50.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.45-0.50.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.45-0.50.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.45-0.50.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
SUSE Linux Enterprise Server 11.4 i586
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.45-0.50.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.45-0.50.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    tomcat6
    Apache Servlet/JSP Engine, RI for Servlet 2.5/JSP 2.1 API
    6.0.45-0.50.1 lock rpm lock src
    tomcat6-admin-webapps
    The host-manager and manager web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-docs-webapp
    The docs web application for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-javadoc
    Javadoc generated documentation for Apache Tomcat
    6.0.45-0.50.1 lock rpm
    tomcat6-jsp-2_1-api
    Apache Tomcat JSP API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-lib
    Libraries needed to run the Tomcat Web container
    6.0.45-0.50.1 lock rpm
    tomcat6-servlet-2_5-api
    Apache Tomcat Servlet API implementation classes
    6.0.45-0.50.1 lock rpm
    tomcat6-webapps
    The ROOT and examples web applications for Apache Tomcat
    6.0.45-0.50.1 lock rpm