tomcat-7.0.76-16.0.1.el7.AXS7

Tomcat is the servlet container that is used in the official Reference
Implementation for the Java Servlet and JavaServer Pages technologies. The Java
Servlet and JavaServer Pages specifications are developed by Sun under the Java
Community Process.

Tomcat is developed in an open and participatory environment and released under
the Apache Software License version 2.0. Tomcat is intended to be a
collaboration of the best-of-breed developers from around the world.

Security Fix(es):

* Fix file path bug introduced by the CVE-2021-25329 fix

CVE(s):
CVE-2021-25329
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.