stable

tomcat-7.0.90-1.el6

FEDORA-EPEL-2018-d143ebd7cc created by csutherl 4 years ago for Fedora EPEL 6

This update includes a rebase from 7.0.86 up to 7.0.90 which resolves two CVEs along with various other bugs/features:

  • #1607585 CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
  • #1579613 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins

This update has been submitted for testing by csutherl.

4 years ago

This update has been pushed to testing.

4 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for batched by csutherl.

4 years ago

This update has been submitted for stable by csutherl.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
4 years ago
in testing
4 years ago
in stable
4 years ago
BZ#1579611 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
0
0
BZ#1579613 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins [epel-all]
0
0
BZ#1607582 CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
0
0
BZ#1607585 CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up [epel-all]
0
0

Automated Test Results