Red Hat 製品エラータ RHSA-2024:5694 - Security Advisory
発行日:
2024-08-21
更新日:
2024-08-21

RHSA-2024:5694 - Security Advisory

概要

Important: tomcat security update

タイプ/重大度

Security Advisory: Important

Red Hat Insights パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for tomcat is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es):

  • tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

修正

  • BZ - 2295651 - CVE-2024-34750 tomcat: Improper Handling of Exceptional Conditions

Red Hat Enterprise Linux for x86_64 8

SRPM
tomcat-9.0.87-1.el8_10.2.src.rpm SHA-256: ead35386d4a35051186357cd24046b87f51f018c2937af0b5b520f4441f6e420
x86_64
tomcat-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 516bb514fccbad94d0f6039f4caa6232f60186b57e0772a1f2cf9d0fbdb970ff
tomcat-admin-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95f814c39fc50419dee86f1ea630f02ebf197b4de6b75a2714a2ae94d93a40a5
tomcat-docs-webapp-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 8634f83c6f7c9e4134ba56fb51b841b50386169c26d1005d003defb7e306a24a
tomcat-el-3.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95bd4d7540b8104d29574da2f79a70cdb06d724ad1e9beed3f74bf3e327f5c15
tomcat-jsp-2.3-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: e109f246987f593de087ee93462c4c516f1ee3d0ffec60425ef674820de13ca3
tomcat-lib-9.0.87-1.el8_10.2.noarch.rpm SHA-256: d29cf84defe38c84113d25b057a9f9dd4648231f9c7b9176de42f679d9c65422
tomcat-servlet-4.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 2832452cd5084b9fa03a528354301926342158d4034d26fc90fb121c088cc05f
tomcat-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: dde786a92899f191563bb584ccc5667901b10b51c4cc9b9efefba9e9fa1fa692

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
tomcat-9.0.87-1.el8_10.2.src.rpm SHA-256: ead35386d4a35051186357cd24046b87f51f018c2937af0b5b520f4441f6e420
s390x
tomcat-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 516bb514fccbad94d0f6039f4caa6232f60186b57e0772a1f2cf9d0fbdb970ff
tomcat-admin-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95f814c39fc50419dee86f1ea630f02ebf197b4de6b75a2714a2ae94d93a40a5
tomcat-docs-webapp-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 8634f83c6f7c9e4134ba56fb51b841b50386169c26d1005d003defb7e306a24a
tomcat-el-3.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95bd4d7540b8104d29574da2f79a70cdb06d724ad1e9beed3f74bf3e327f5c15
tomcat-jsp-2.3-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: e109f246987f593de087ee93462c4c516f1ee3d0ffec60425ef674820de13ca3
tomcat-lib-9.0.87-1.el8_10.2.noarch.rpm SHA-256: d29cf84defe38c84113d25b057a9f9dd4648231f9c7b9176de42f679d9c65422
tomcat-servlet-4.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 2832452cd5084b9fa03a528354301926342158d4034d26fc90fb121c088cc05f
tomcat-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: dde786a92899f191563bb584ccc5667901b10b51c4cc9b9efefba9e9fa1fa692

Red Hat Enterprise Linux for Power, little endian 8

SRPM
tomcat-9.0.87-1.el8_10.2.src.rpm SHA-256: ead35386d4a35051186357cd24046b87f51f018c2937af0b5b520f4441f6e420
ppc64le
tomcat-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 516bb514fccbad94d0f6039f4caa6232f60186b57e0772a1f2cf9d0fbdb970ff
tomcat-admin-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95f814c39fc50419dee86f1ea630f02ebf197b4de6b75a2714a2ae94d93a40a5
tomcat-docs-webapp-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 8634f83c6f7c9e4134ba56fb51b841b50386169c26d1005d003defb7e306a24a
tomcat-el-3.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95bd4d7540b8104d29574da2f79a70cdb06d724ad1e9beed3f74bf3e327f5c15
tomcat-jsp-2.3-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: e109f246987f593de087ee93462c4c516f1ee3d0ffec60425ef674820de13ca3
tomcat-lib-9.0.87-1.el8_10.2.noarch.rpm SHA-256: d29cf84defe38c84113d25b057a9f9dd4648231f9c7b9176de42f679d9c65422
tomcat-servlet-4.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 2832452cd5084b9fa03a528354301926342158d4034d26fc90fb121c088cc05f
tomcat-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: dde786a92899f191563bb584ccc5667901b10b51c4cc9b9efefba9e9fa1fa692

Red Hat Enterprise Linux for ARM 64 8

SRPM
tomcat-9.0.87-1.el8_10.2.src.rpm SHA-256: ead35386d4a35051186357cd24046b87f51f018c2937af0b5b520f4441f6e420
aarch64
tomcat-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 516bb514fccbad94d0f6039f4caa6232f60186b57e0772a1f2cf9d0fbdb970ff
tomcat-admin-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95f814c39fc50419dee86f1ea630f02ebf197b4de6b75a2714a2ae94d93a40a5
tomcat-docs-webapp-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 8634f83c6f7c9e4134ba56fb51b841b50386169c26d1005d003defb7e306a24a
tomcat-el-3.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 95bd4d7540b8104d29574da2f79a70cdb06d724ad1e9beed3f74bf3e327f5c15
tomcat-jsp-2.3-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: e109f246987f593de087ee93462c4c516f1ee3d0ffec60425ef674820de13ca3
tomcat-lib-9.0.87-1.el8_10.2.noarch.rpm SHA-256: d29cf84defe38c84113d25b057a9f9dd4648231f9c7b9176de42f679d9c65422
tomcat-servlet-4.0-api-9.0.87-1.el8_10.2.noarch.rpm SHA-256: 2832452cd5084b9fa03a528354301926342158d4034d26fc90fb121c088cc05f
tomcat-webapps-9.0.87-1.el8_10.2.noarch.rpm SHA-256: dde786a92899f191563bb584ccc5667901b10b51c4cc9b9efefba9e9fa1fa692

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。