Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Oracle Linux 9 ELSA-2024-3307 Critical: Tomcat Denial Of Service Threat

oracle
Calendar Grey May 27, 2024
Oracle Linux Logo Esm H88
Oracle Linux Security Bulletin ELSA-2024-3307 highlights essential tomcat enhancements aimed at resolving severe DoS vulnerabilities.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[1:9.0.87-1.el9_4.1] - Resolves: RHEL-34815 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-31048 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-31032 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-35328 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080)

Topics%20covered

Topics Covered

security advisory DoS issue critical advisory Tomcat update Oracle Linux

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//tomcat-9.0.87-1.el9_4.1.src.rpm

x86_64

tomcat-9.0.87-1.el9_4.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm

aarch64

tomcat-9.0.87-1.el9_4.1.noarch.rpm tomcat-admin-webapps-9.0.87-1.el9_4.1.noarch.rpm tomcat-docs-webapp-9.0.87-1.el9_4.1.noarch.rpm tomcat-el-3.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-jsp-2.3-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-lib-9.0.87-1.el9_4.1.noarch.rpm tomcat-servlet-4.0-api-9.0.87-1.el9_4.1.noarch.rpm tomcat-webapps-9.0.87-1.el9_4.1.noarch.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-23672 CVE-2024-24549

Topics%20covered

Topics Covered

security advisory DoS issue critical advisory Tomcat update Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here