tomcat6-6.0.24-55.AXS4

エラータID: AXSA:2013-467:03

Release date: 
Friday, June 7, 2013 - 12:37
Subject: 
tomcat6-6.0.24-55.AXS4
Affected Channels: 
Asianux Server 4 for ppc
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.

Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.

Security issues fixed with this release:

• CVE-2013-1976
• CVE-2013-2051
No description available at the time of writing, please refer to the CVE links below.

Solution: 

Update packages.

CVEs: 
CVE-2013-1976
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.
CVE-2013-2051
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
Additional Info: 

N/A

Download: 

SRPMS
  1. tomcat6-6.0.24-55.AXS4.src.rpm
    MD5: 96bf0f2a5dea7bd180c936c77571a778
    SHA-256: 7fcaef3077bfdc83402db32f26059f29d449d5ac63a8e252ecd9b7df3aa8c7ac
    Size: 3.36 MB

Asianux Server 4 for x86
  1. tomcat6-6.0.24-55.AXS4.noarch.rpm
    MD5: 3b32a6cae4c9c06eb8c8380eaed98e0b
    SHA-256: 996d95628801b946e6b1d15f5ae9ba7827e13ff013682396c386ee04e5dc643c
    Size: 88.39 kB
  2. tomcat6-jsp-2.1-api-6.0.24-55.AXS4.noarch.rpm
    MD5: 1faa617c5c704e6567a0ba024a4f28a0
    SHA-256: 6b5f771399817a559b48e6f7d5b91ad4e9dcf8d4019b60377ac7b7721aee9489
    Size: 81.23 kB
  3. tomcat6-el-2.1-api-6.0.24-55.AXS4.noarch.rpm
    MD5: 4bd3d32a380d89f793ac928daf6f9917
    SHA-256: 9b4fe37d8bdef7767dc73390a7079d44e6bde9d32501b6ebdba656352c5691c8
    Size: 44.35 kB
  4. tomcat6-lib-6.0.24-55.AXS4.noarch.rpm
    MD5: 7890eddb2041f11b726c6c2ba14daa6c
    SHA-256: 15b70d134709e5d20f893150aacb3fc4477feaa8ee2a92c1c8330432e1a0c24b
    Size: 2.82 MB
  5. tomcat6-servlet-2.5-api-6.0.24-55.AXS4.noarch.rpm
    MD5: ee29e20bb7f51f3eca44ee00af936202
    SHA-256: c573f8da6b36fa0041c6507f098c8b927d2e7a53a8e19e4ac177b2b691d061fc
    Size: 95.12 kB

Asianux Server 4 for x86_64
  1. tomcat6-6.0.24-55.AXS4.noarch.rpm
    MD5: 3b32a6cae4c9c06eb8c8380eaed98e0b
    SHA-256: 996d95628801b946e6b1d15f5ae9ba7827e13ff013682396c386ee04e5dc643c
    Size: 88.39 kB
  2. tomcat6-jsp-2.1-api-6.0.24-55.AXS4.noarch.rpm
    MD5: 1faa617c5c704e6567a0ba024a4f28a0
    SHA-256: 6b5f771399817a559b48e6f7d5b91ad4e9dcf8d4019b60377ac7b7721aee9489
    Size: 81.23 kB
  3. tomcat6-el-2.1-api-6.0.24-55.AXS4.noarch.rpm
    MD5: 4bd3d32a380d89f793ac928daf6f9917
    SHA-256: 9b4fe37d8bdef7767dc73390a7079d44e6bde9d32501b6ebdba656352c5691c8
    Size: 44.35 kB
  4. tomcat6-lib-6.0.24-55.AXS4.noarch.rpm
    MD5: 7890eddb2041f11b726c6c2ba14daa6c
    SHA-256: 15b70d134709e5d20f893150aacb3fc4477feaa8ee2a92c1c8330432e1a0c24b
    Size: 2.82 MB
  5. tomcat6-servlet-2.5-api-6.0.24-55.AXS4.noarch.rpm
    MD5: ee29e20bb7f51f3eca44ee00af936202
    SHA-256: c573f8da6b36fa0041c6507f098c8b927d2e7a53a8e19e4ac177b2b691d061fc
    Size: 95.12 kB