==========================================================================
Ubuntu Security Notice USN-7032-1
September 24, 2024

tomcat8, tomcat9 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

Tomcat could allow unintended access to network services.

Software Description:
- tomcat9: Servlet and JSP engine
- tomcat8: Servlet and JSP engine

Details:

It was discovered that Tomcat incorrectly handled HTTP trailer headers. A
remote attacker could possibly use this issue to perform HTTP request
smuggling.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libtomcat9-java                 9.0.70-2ubuntu0.1

Ubuntu 22.04 LTS
   libtomcat9-embed-java           9.0.58-1ubuntu0.1+esm3
                                   Available with Ubuntu Pro
   libtomcat9-java                 9.0.58-1ubuntu0.1+esm3
                                   Available with Ubuntu Pro

Ubuntu 20.04 LTS
   libtomcat9-embed-java           9.0.31-1ubuntu0.7
   libtomcat9-java                 9.0.31-1ubuntu0.7

Ubuntu 18.04 LTS
   libtomcat8-embed-java           8.5.39-1ubuntu1~18.04.3+esm3
                                   Available with Ubuntu Pro
   libtomcat8-java                 8.5.39-1ubuntu1~18.04.3+esm3
                                   Available with Ubuntu Pro
   libtomcat9-embed-java           9.0.16-3ubuntu0.18.04.2+esm3
                                   Available with Ubuntu Pro
   libtomcat9-java                 9.0.16-3ubuntu0.18.04.2+esm3
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7032-1
   CVE-2023-46589

Package Information:
   https://launchpad.net/ubuntu/+source/tomcat9/9.0.70-2ubuntu0.1
   https://launchpad.net/ubuntu/+source/tomcat9/9.0.31-1ubuntu0.7

Ubuntu 7032-1: Tomcat Security Advisory Updates

September 25, 2024
Tomcat could allow unintended access to network services.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Tomcat could allow unintended access to network services. Software Description: - tomcat9: Servlet and JSP engine - tomcat8: Servlet and JSP engine Details: It was discovered that Tomcat incorrectly handled HTTP trailer headers. A remote attacker could possibly use this issue to perform HTTP request smuggling.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS   libtomcat9-java                 9.0.70-2ubuntu0.1 Ubuntu 22.04 LTS   libtomcat9-embed-java           9.0.58-1ubuntu0.1+esm3                                   Available with Ubuntu Pro   libtomcat9-java                 9.0.58-1ubuntu0.1+esm3                                   Available with Ubuntu Pro Ubuntu 20.04 LTS   libtomcat9-embed-java           9.0.31-1ubuntu0.7   libtomcat9-java                 9.0.31-1ubuntu0.7 Ubuntu 18.04 LTS   libtomcat8-embed-java           8.5.39-1ubuntu1~18.04.3+esm3                                   Available with Ubuntu Pro   libtomcat8-java                 8.5.39-1ubuntu1~18.04.3+esm3                                   Available with Ubuntu Pro   libtomcat9-embed-java           9.0.16-3ubuntu0.18.04.2+esm3                                   Available with Ubuntu Pro   libtomcat9-java                 9.0.16-3ubuntu0.18.04.2+esm3                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7032-1

  CVE-2023-46589

Severity
Ubuntu Security Notice USN-7032-1

Package Information

  https://launchpad.net/ubuntu/+source/tomcat9/9.0.70-2ubuntu0.1   https://launchpad.net/ubuntu/+source/tomcat9/9.0.31-1ubuntu0.7

Related News

Essential Server Security Security Strategies for Administrators
5 - 9 min read
In the current threat landscape, Linux servers have emerged as a dominant force, underpinning approximately 81% of all websites globally. Despite
Google Chooses Passkeys Over Passwords: Examining the Security Benefits for Linux Users
2 - 4 min read
In a bold move towards a future without traditional passwords, Google has introduced secure passkey sign-ins across almost all devices, including
Linux Security Modules (LSM): SELinux vs AppArmor vs TOMOYO
3 - 6 min read
Linux has long been celebrated for its versatility, robustness, and vast array of security features it offers. A key aspect of maintaining and
Google Chrome 129: Addressing Crucial Vulnerabilities and Enhancing Security
2 - 4 min read
Google Chrome remains the crown jewel in the browser market, with an impressive user base of approximately 3.45 billion. However, this immense
Defending Against Malicious Web Shells: Lessons from the Apache AXIS Server Attack
2 - 4 min read
Hackers have recently been observed actively targeting the Apache AXIS server to deploy malicious web shells, exposing significant vulnerabilities
Emerging Mallox Ransomware Variant Targets Linux Using Kryptina Code
3 - 5 min read
A new variant of the Mallox ransomware, which traditionally targeted Windows systems, has been observed targeting Linux environments. This
TeamTNT Hackers Attacking VPS Servers Running CentOS
3 - 5 min read
Security researchers have recently observed an alarming resurgence of TeamTNT , a notorious hacking group known for targeting cloud infrastructures.
Fighting Back Against Hadooken Malware by Strengthening WebLogic Security
2 - 4 min read
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved