Synopsis

Important: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

Type/Severity

Security Advisory: Important

Topic

An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 6 and Red Hat JBoss Web Server 3.1 for RHEL 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.

This release of Red Hat JBoss Web Server 3.1 Service Pack 2 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.

Security Fix(es):

• apr: Out-of-bounds array deref in apr_time_exp*() functions (CVE-2017-12613)
  
• tomcat: Remote Code Execution via JSP Upload (CVE-2017-12615)
  
• tomcat: Information Disclosure when using VirtualDirContext (CVE-2017-12616)
  
• tomcat: Remote Code Execution bypass for CVE-2017-12615 (CVE-2017-12617)
  
• tomcat-native: Mishandling of client certificates can allow for OCSP check bypass (CVE-2017-15698)
  
• tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources (CVE-2018-1304)
  
• tomcat: Late application of security constraints can lead to resource exposure for unauthorised users (CVE-2018-1305)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• JBoss Enterprise Web Server 3 for RHEL 7 x86_64
• JBoss Enterprise Web Server 3 for RHEL 6 x86_64
• JBoss Enterprise Web Server 3 for RHEL 6 i386

Fixes

• BZ - 1493220 - CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload
• BZ - 1493222 - CVE-2017-12616 tomcat: Information Disclosure when using VirtualDirContext
• BZ - 1494283 - CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615
• BZ - 1506523 - CVE-2017-12613 apr: Out-of-bounds array deref in apr_time_exp*() functions
• BZ - 1540824 - CVE-2017-15698 tomcat-native: Mishandling of client certificates can allow for OCSP check bypass
• BZ - 1548282 - CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
• BZ - 1548289 - CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources

CVEs

• CVE-2017-12613
• CVE-2017-12615
• CVE-2017-12616
• CVE-2017-12617
• CVE-2017-15698
• CVE-2018-1304
• CVE-2018-1305

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/

JBoss Enterprise Web Server 3 for RHEL 7

SRPM
mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el7.src.rpm	SHA-256: e99ac4924eec538799484544ad6a508290629c50a722f78636a364bb223250c7
tomcat-native-1.2.8-11.redhat_11.ep7.el7.src.rpm	SHA-256: c654d35260de04eda9647a98ff1f70fb07280a940e53f74997d8dc3bcb4c2790
tomcat-vault-1.1.6-1.Final_redhat_1.1.ep7.el7.src.rpm	SHA-256: c3c8b113aaf7323175160b111cc3780a78c686f713b78be867de2e44071382d4
tomcat7-7.0.70-25.ep7.el7.src.rpm	SHA-256: 180d5b705730c4ce119063e0a0c1ddbf33118846a6893533200b1b6c37b788e8
tomcat8-8.0.36-29.ep7.el7.src.rpm	SHA-256: cf2019acd2fa04ab32e62755ad817c05885e5a88814372abb6f20a66823310e5
x86_64
mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el7.noarch.rpm	SHA-256: ed15cba0d6ae680c38e6aeb931ee47fa63323d90c69fe0b1c7646667027ada80
mod_cluster-tomcat7-1.3.8-2.Final_redhat_2.1.ep7.el7.noarch.rpm	SHA-256: 24ea6fb750efd558d3d7b22ddfc4cf0d01e4a6f81b2b89c310cb566bd8b2239d
mod_cluster-tomcat8-1.3.8-2.Final_redhat_2.1.ep7.el7.noarch.rpm	SHA-256: 4c8d4e3721df16daaeeda4da5cecdc874ee2934ba48a9df403900214930013fd
tomcat-native-1.2.8-11.redhat_11.ep7.el7.x86_64.rpm	SHA-256: 9054a3ef80ffeb2c880bb29152b969d536db31536dd9019e4b356421cf339a68
tomcat-native-debuginfo-1.2.8-11.redhat_11.ep7.el7.x86_64.rpm	SHA-256: 393abc42f22f9b4626f2894d38ed755580b7b00aa89794af456d4a72f76783bb
tomcat-vault-1.1.6-1.Final_redhat_1.1.ep7.el7.noarch.rpm	SHA-256: 86a107a3866d747f03954a78f4893e091fa7eb63adf2da782ac18ffa96c2ade9
tomcat-vault-tomcat7-1.1.6-1.Final_redhat_1.1.ep7.el7.noarch.rpm	SHA-256: ee1ac3b689f9ff91a9a95367415561817fd6d6c9420cbc6360fa013f0cbd2d69
tomcat-vault-tomcat8-1.1.6-1.Final_redhat_1.1.ep7.el7.noarch.rpm	SHA-256: 3880330a87bbbd1e740a698fa47e2008cebed2b80aca8314d7dc8b3b4390200c
tomcat7-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: b3c4a0de3c9f0b0daa085901bd485ef1c0e5db034df5c4a9a7004ea3c73480b7
tomcat7-admin-webapps-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 862e877b0768498695f045e00a498180181899e7c7ae32ec6f18ba3fb43fba33
tomcat7-docs-webapp-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 9a2d602e96e998f061828f5149a9f34b8ddb2f8f625b7fa96281769e770026a6
tomcat7-el-2.2-api-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 9ea03dd9ad6ae99123b502425560532fb7d2199a0a4c694857bd32221d164914
tomcat7-javadoc-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: b0a380fd018d90d9cd2c5402aac4c66cabfe407737da7ec775cefc41d41225e4
tomcat7-jsp-2.2-api-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 46d2dca906cf4a347f84a0abdc1147df9f260e80fa2ee74faf58cb18b9f598d1
tomcat7-jsvc-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: c5367debfd7a80704b57d3e8e3d1be30c263cee9863ecbb2eab8e7cf81c25718
tomcat7-lib-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: f301ace120dd0bd4a53af5679087a5732b42af8d8ef76bef1e31c822eb02d5d3
tomcat7-log4j-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 8958a9df5e283601da846677f706127a73980e00d74ced02a5c9623800ee1f6f
tomcat7-selinux-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 50fdbeedc05329c2a520d57fb79d92d2262d435f70f0df65f4c27eacbb944a3a
tomcat7-servlet-3.0-api-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 5120931432b10f8ec2b3aff404ea0bea6e35c81d05844bf7860fe88688d40228
tomcat7-webapps-7.0.70-25.ep7.el7.noarch.rpm	SHA-256: 4a611c21997bc76bd8c9142c19ef17bb232c94e7725395e482b0077a1d4cca6d
tomcat8-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 6c65045a8b1da2db349e87a8214bae340525cb5d46a755cbb9ed9db5d774755e
tomcat8-admin-webapps-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 9ff8b45f28d9b049971f9a946cae05fe3dbde869e556baeab3a57b32caf23d83
tomcat8-docs-webapp-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 064456f8e2a13b0a07353448dd10b4eb16828750f693ec2089991d0a4d0a2a5d
tomcat8-el-2.2-api-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 580da7071408e97a9ba53b678974f7e569207ebb79a11c9b509404d3d35dc7ca
tomcat8-javadoc-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 178e7c153bfaf6be91952a895751c7180819b6c00ae67c6acc796fde4882d022
tomcat8-jsp-2.3-api-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 73b1b31be97a03eac4d5dbe1cdc3f18e357353c58bad2636e0f33e827db11a43
tomcat8-jsvc-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: a18643f4d1e4734c9d10048556f7a92289f05b3903694ab88b5a00c9123d99c7
tomcat8-lib-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 612423b3dda403bcfcc68770815cfa2d92ee5d5c4dc36c83275f7ae7037764e8
tomcat8-log4j-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: 46b6afce9b72c306abee4659568786694515beb531187c25cf0cd8f5550f4e43
tomcat8-selinux-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: b5416ab26012dff3be173b5d95e12d6a23e6414fa5ecddcbb9d8c4cafe8814a1
tomcat8-servlet-3.1-api-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: ffffd00f74d39620b971f07eff50d9ea34d38bf78e8429f0a830d092a60b5097
tomcat8-webapps-8.0.36-29.ep7.el7.noarch.rpm	SHA-256: bcdac70b4ba76947e72a332e2db468a4a3da8e5e01beb400d9770c4f41f427bb

JBoss Enterprise Web Server 3 for RHEL 6

SRPM
mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el6.src.rpm	SHA-256: 1614a4e2ea072cb9da34b1122530ad403f980b7b12b34fc03304816c92cd228b
tomcat-native-1.2.8-11.redhat_11.ep7.el6.src.rpm	SHA-256: 609f2077b39e1d4bf07fa5cedde5d661accf0d2e47281bc0ac78e19b961383f5
tomcat-vault-1.1.6-1.Final_redhat_1.1.ep7.el6.src.rpm	SHA-256: 5c5e278bcfb592d79813b586df1faaed42581e591978c4972c7eee4b4bda3e0c
tomcat7-7.0.70-25.ep7.el6.src.rpm	SHA-256: 05db3b59c64a6e1707da343cd3ecdab703077386f5ded602b933496e277c231e
tomcat8-8.0.36-29.ep7.el6.src.rpm	SHA-256: 93852fca3a076eea91a64628d69f848cc9b9025fd990cfd49f94510b2a11fcc8
x86_64
mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: b67abc915d54e34ee084a28c1cb01af3bedb7d729075c378bbf239489424e777
mod_cluster-tomcat7-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: 4948fce27962d6a272dd1219f7bfc86c34b0e138843c285fcbe8093369fb628d
mod_cluster-tomcat8-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: d3c7637f085bc3d62b1292d0ae7764c6f07fc12a3e3c2dfe4734498022106b91
tomcat-native-1.2.8-11.redhat_11.ep7.el6.x86_64.rpm	SHA-256: db9d09ccee58f3c9abca18f089247602c3e2bf8a2873d52be402777627ccf922
tomcat-native-debuginfo-1.2.8-11.redhat_11.ep7.el6.x86_64.rpm	SHA-256: 98c1350e270c63c787b4935ac0d79385f4e06ac0bdb509ee21feaeebb186e5ca
tomcat-vault-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: 9ac833cab603b132703e8bea671ce00594ec8d716b36a15559bea74344eb0500
tomcat-vault-tomcat7-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: 2c2d8bd1df5b58da57e05f22661de4794c36e59d32f806ebffed6a8b19e94b34
tomcat-vault-tomcat8-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: d4096122b301a4acbc270ead41f7333eed58c1fc68c5a36eb7bb4edec41d18b7
tomcat7-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 81a26b95c262b851ed88b3a2e80138c584f70e5ab1faf80dc2fba972508d15d0
tomcat7-admin-webapps-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: fc9401d52bb3a91e9ac81c6775a8bae1b80149757046978a0147563683b1c38a
tomcat7-docs-webapp-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a98aa08afbb6b014bf1f107a2e268b8d66c4919f803b01f23c17f92115b0f042
tomcat7-el-2.2-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: e2e24faea8a26de0456be37b0a0a1b5f3c4501c79c938e3e18f55b97bae2e020
tomcat7-javadoc-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: c1c646b2fa9c0624e9402f3d730f3ce8587f085a9b2cf5dc615a2d4d09e1a144
tomcat7-jsp-2.2-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 003ccd2f065165336ef969b8a51dcd936c49445e3b817b1875b0e35aaf9a31f2
tomcat7-jsvc-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 83e536a24e4a337fb016a9e78f3bb147199547dbdbe6fbc21ae33a905b11060c
tomcat7-lib-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a9d2730cbe6bbfe0cd4722734e939960cff13109cd7f71f5f824139543ec11d4
tomcat7-log4j-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: fb1243c7b511585294a6befa4f69e550f54009a88bac9d712156db00fecde930
tomcat7-selinux-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a557a6c0bd5bff5c65eac039c7804eaccec4cca92eecbaa1fd07a2780f166687
tomcat7-servlet-3.0-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 2d8ba5fc4507499fcd285ce0b632096798e0569e31337a44df26a1028374fecb
tomcat7-webapps-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 339e4a9d2bde78a9d82023272405db81eed484358e3bd7f151ce93d282392b04
tomcat8-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: fdeac7c093f6d98b379a6bd21515d8dd97d483a6125baaef205f70ff14a7640a
tomcat8-admin-webapps-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 414da7d50078d540c4705f696ef43c4b32a9d61181c7b8d29cefe79961838eed
tomcat8-docs-webapp-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 0848fb8d093a65f353b7c55f0c62ebf6e2761b88e6c899ebd27a52043923e4cc
tomcat8-el-2.2-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: bd94fa3597d9b1ae923926efc55050b9b2f5367f62373033e31c3bc65ddb145b
tomcat8-javadoc-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: a661c6410a8f891d46c8a3f3a169a64ed04a0f317d9c64842dfb39cd65d43bf8
tomcat8-jsp-2.3-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: fbc560f2b4246c89ce08660599bf8cc2356d44361a7bcb10d4fa28e86288bc7b
tomcat8-jsvc-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 7354287621044c088afef6e3d2a31a51fb721657cd1cffaff40d73fc293ccdc6
tomcat8-lib-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 300b57122db3571a9cc4394f1c064d2bdc95718f0a50ae6470b5cb1c607f5345
tomcat8-log4j-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: c52c7483eb4d1f76f8ed662b392120c9b83a53073ee49c0fc0bfeeb997a1a95e
tomcat8-selinux-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 415cbf0291ae84967aea1db05bcf4b5ecdac5262652b667bf7d76aa64fa71ecf
tomcat8-servlet-3.1-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 04877075361fabe35de71b1d69515c57245fe2dd56d1665265cec04b09ec8df4
tomcat8-webapps-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: dca7a9c2b0d5a0d6c6786564d97d23da19ec732b19324d9a06e5f0018c37f131
i386
mod_cluster-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: b67abc915d54e34ee084a28c1cb01af3bedb7d729075c378bbf239489424e777
mod_cluster-tomcat7-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: 4948fce27962d6a272dd1219f7bfc86c34b0e138843c285fcbe8093369fb628d
mod_cluster-tomcat8-1.3.8-2.Final_redhat_2.1.ep7.el6.noarch.rpm	SHA-256: d3c7637f085bc3d62b1292d0ae7764c6f07fc12a3e3c2dfe4734498022106b91
tomcat-native-1.2.8-11.redhat_11.ep7.el6.i686.rpm	SHA-256: 901a336dd0f63f35a356b0c7a4cea14b0f293c02150ae307e0a52927a5fc772a
tomcat-native-debuginfo-1.2.8-11.redhat_11.ep7.el6.i686.rpm	SHA-256: de8f3d74dc2de31a7baffb7c0f0976c5f3880113d3e3e15427d76fcc99272577
tomcat-vault-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: 9ac833cab603b132703e8bea671ce00594ec8d716b36a15559bea74344eb0500
tomcat-vault-tomcat7-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: 2c2d8bd1df5b58da57e05f22661de4794c36e59d32f806ebffed6a8b19e94b34
tomcat-vault-tomcat8-1.1.6-1.Final_redhat_1.1.ep7.el6.noarch.rpm	SHA-256: d4096122b301a4acbc270ead41f7333eed58c1fc68c5a36eb7bb4edec41d18b7
tomcat7-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 81a26b95c262b851ed88b3a2e80138c584f70e5ab1faf80dc2fba972508d15d0
tomcat7-admin-webapps-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: fc9401d52bb3a91e9ac81c6775a8bae1b80149757046978a0147563683b1c38a
tomcat7-docs-webapp-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a98aa08afbb6b014bf1f107a2e268b8d66c4919f803b01f23c17f92115b0f042
tomcat7-el-2.2-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: e2e24faea8a26de0456be37b0a0a1b5f3c4501c79c938e3e18f55b97bae2e020
tomcat7-javadoc-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: c1c646b2fa9c0624e9402f3d730f3ce8587f085a9b2cf5dc615a2d4d09e1a144
tomcat7-jsp-2.2-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 003ccd2f065165336ef969b8a51dcd936c49445e3b817b1875b0e35aaf9a31f2
tomcat7-jsvc-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 83e536a24e4a337fb016a9e78f3bb147199547dbdbe6fbc21ae33a905b11060c
tomcat7-lib-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a9d2730cbe6bbfe0cd4722734e939960cff13109cd7f71f5f824139543ec11d4
tomcat7-log4j-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: fb1243c7b511585294a6befa4f69e550f54009a88bac9d712156db00fecde930
tomcat7-selinux-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: a557a6c0bd5bff5c65eac039c7804eaccec4cca92eecbaa1fd07a2780f166687
tomcat7-servlet-3.0-api-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 2d8ba5fc4507499fcd285ce0b632096798e0569e31337a44df26a1028374fecb
tomcat7-webapps-7.0.70-25.ep7.el6.noarch.rpm	SHA-256: 339e4a9d2bde78a9d82023272405db81eed484358e3bd7f151ce93d282392b04
tomcat8-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: fdeac7c093f6d98b379a6bd21515d8dd97d483a6125baaef205f70ff14a7640a
tomcat8-admin-webapps-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 414da7d50078d540c4705f696ef43c4b32a9d61181c7b8d29cefe79961838eed
tomcat8-docs-webapp-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 0848fb8d093a65f353b7c55f0c62ebf6e2761b88e6c899ebd27a52043923e4cc
tomcat8-el-2.2-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: bd94fa3597d9b1ae923926efc55050b9b2f5367f62373033e31c3bc65ddb145b
tomcat8-javadoc-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: a661c6410a8f891d46c8a3f3a169a64ed04a0f317d9c64842dfb39cd65d43bf8
tomcat8-jsp-2.3-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: fbc560f2b4246c89ce08660599bf8cc2356d44361a7bcb10d4fa28e86288bc7b
tomcat8-jsvc-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 7354287621044c088afef6e3d2a31a51fb721657cd1cffaff40d73fc293ccdc6
tomcat8-lib-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 300b57122db3571a9cc4394f1c064d2bdc95718f0a50ae6470b5cb1c607f5345
tomcat8-log4j-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: c52c7483eb4d1f76f8ed662b392120c9b83a53073ee49c0fc0bfeeb997a1a95e
tomcat8-selinux-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 415cbf0291ae84967aea1db05bcf4b5ecdac5262652b667bf7d76aa64fa71ecf
tomcat8-servlet-3.1-api-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: 04877075361fabe35de71b1d69515c57245fe2dd56d1665265cec04b09ec8df4
tomcat8-webapps-8.0.36-29.ep7.el6.noarch.rpm	SHA-256: dca7a9c2b0d5a0d6c6786564d97d23da19ec732b19324d9a06e5f0018c37f131