MGASA-2017-0050

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0050.html

Import Source

https://advisories.mageia.org/MGASA-2017-0050.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0050

Related

CVE-2016-8745

Published

2017-02-18T21:05:27Z

Modified

2017-02-18T20:56:12Z

Summary

Updated tomcat packages fix security vulnerability

Details

It was discovered that incorrect error handling in the NIO HTTP connector of the Tomcat servlet and JSP engine could result in information disclosure (CVE-2016-8745).

References

https://advisories.mageia.org/MGASA-2017-0050.html
https://bugs.mageia.org/show_bug.cgi?id=20081
https://www.debian.org/security/2017/dsa-3754
http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.75

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / tomcat

Package

Name: tomcat
Purl: pkg:rpm/mageia/tomcat?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.75-1.mga5

Ecosystem specific

{
    "section": "core"
}