RHSA-2008:0042Medium

Red Hat Security Advisory: tomcat security update

Published
March 11, 2008
Last Modified
June 25, 2026

🔗 CVE IDs covered (2)

CVE-2007-5342 →CVE-2007-5461 →

📋 Description

CVE-2007-5342 — Apache Tomcat's default security policy is too open CVE-2007-5461 — Absolute path traversal Apache Tomcat WEBDAV

🎯 Affected products94

  • Red Hat Enterprise Linux (v. 5 server)
  • Red Hat Enterprise Linux Desktop (v. 5 client)
  • Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.src as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-common-lib-0:5.5.23-0jpp.3.0.3.el5_1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • tomcat5-debuginfo-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • tomcat5-debuginfo-0:5.5.23-0jpp.3.0.3.el5_1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • +64 more not shown

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 References (5)