RHSA-2017:2247LowCVSS 4.2

Red Hat Security Advisory: tomcat security, bug fix, and enhancement update

Published
August 1, 2017
Last Modified
November 5, 2026

🔗 CVE IDs covered (5)

CVE-2016-0762 →CVE-2016-5018 →CVE-2016-6794 →CVE-2016-6796 →CVE-2016-6797 →

📋 Description

CVE-2016-0762 — tomcat: timing attack in Realm implementation CVE-2016-5018 — tomcat: security manager bypass via IntrospectHelper utility function CVE-2016-6794 — tomcat: system property disclosure CVE-2016-6796 — tomcat: security manager bypass via JSP Servlet config parameters CVE-2016-6797 — tomcat: unrestricted access to global resources

🎯 Affected products58

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • tomcat-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • tomcat-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • tomcat-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)
  • tomcat-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • tomcat-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • tomcat-0:7.0.76-2.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • tomcat-0:7.0.76-2.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • tomcat-0:7.0.76-2.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • tomcat-0:7.0.76-2.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • tomcat-admin-webapps-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • tomcat-admin-webapps-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • tomcat-admin-webapps-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)
  • tomcat-admin-webapps-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • tomcat-admin-webapps-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • tomcat-docs-webapp-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • tomcat-docs-webapp-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • tomcat-docs-webapp-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • tomcat-docs-webapp-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)
  • tomcat-el-2.2-api-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • tomcat-el-2.2-api-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • tomcat-el-2.2-api-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)
  • tomcat-el-2.2-api-0:7.0.76-2.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • +28 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (11)