Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Scientific Linux SL7: SLSA-2018-2921-1 Critical Tomcat DoS Alert

Calendar Oct 16, 2018 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory DoS Scientific Linux tomcat update utf-8 decoder
tomcat: A bug in the UTF-8 decoder can lead to DoS (CVE-2018-1336) SL7 noarch tomcat-servlet-3.0-api-7.0.76-8.el7_5.noarch.rpm tomcat-7.0.76-8.el7_5.noarch.rpm tomcat-admin-webapps-7.0.76-8.el7_5.noarch.rpm tomcat-docs-webapp-7.0.76-8.el7_5.noarch.rpm tomcat-el-2.2-api-7.0.76-8.el7_5.noarch.rpm tomcat-javadoc-7.0.76-8.el7_5.noarch.rpm tomcat-jsp-2.2-api-7.0.76-8. [More...] 
Synopsis:          Important: tomcat security update
Advisory ID:       SLSA-2018:2921-1
Issue Date:        2018-10-16
CVE Numbers:       CVE-2018-1336
--

Security Fix(es):

* tomcat: A bug in the UTF-8 decoder can lead to DoS (CVE-2018-1336)
--

SL7
  noarch
    tomcat-servlet-3.0-api-7.0.76-8.el7_5.noarch.rpm
    tomcat-7.0.76-8.el7_5.noarch.rpm
    tomcat-admin-webapps-7.0.76-8.el7_5.noarch.rpm
    tomcat-docs-webapp-7.0.76-8.el7_5.noarch.rpm
    tomcat-el-2.2-api-7.0.76-8.el7_5.noarch.rpm
    tomcat-javadoc-7.0.76-8.el7_5.noarch.rpm
    tomcat-jsp-2.2-api-7.0.76-8.el7_5.noarch.rpm
    tomcat-jsvc-7.0.76-8.el7_5.noarch.rpm
    tomcat-lib-7.0.76-8.el7_5.noarch.rpm
    tomcat-webapps-7.0.76-8.el7_5.noarch.rpm
    tomcat-7.0.76-8.el7_5.src.rpm

- Scientific Linux Development Team