RHSA-2019:2205

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2019:2205

Import Source

https://security.access.redhat.com/data/osv/RHSA-2019:2205.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHSA-2019:2205

Upstream

CVE-2018-1304

CVE-2018-1305

CVE-2018-8014

CVE-2018-8034

Published

2024-09-13T19:52:32Z

Modified

2025-09-26T11:11:24Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator

Summary

Red Hat Security Advisory: tomcat security, bug fix, and enhancement update

Details

References

Affected packages

Red Hat:enterprise_linux:7::client

tomcat

Package

Name: tomcat
Purl: pkg:rpm/redhat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-admin-webapps

Package

Name: tomcat-admin-webapps
Purl: pkg:rpm/redhat/tomcat-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-docs-webapp

Package

Name: tomcat-docs-webapp
Purl: pkg:rpm/redhat/tomcat-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-el-2.2-api

Package

Name: tomcat-el-2.2-api
Purl: pkg:rpm/redhat/tomcat-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-javadoc

Package

Name: tomcat-javadoc
Purl: pkg:rpm/redhat/tomcat-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsp-2.2-api

Package

Name: tomcat-jsp-2.2-api
Purl: pkg:rpm/redhat/tomcat-jsp-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsvc

Package

Name: tomcat-jsvc
Purl: pkg:rpm/redhat/tomcat-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-lib

Package

Name: tomcat-lib
Purl: pkg:rpm/redhat/tomcat-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-servlet-3.0-api

Package

Name: tomcat-servlet-3.0-api
Purl: pkg:rpm/redhat/tomcat-servlet-3.0-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-webapps

Package

Name: tomcat-webapps
Purl: pkg:rpm/redhat/tomcat-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

Red Hat:enterprise_linux:7::computenode

tomcat

Package

Name: tomcat
Purl: pkg:rpm/redhat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-admin-webapps

Package

Name: tomcat-admin-webapps
Purl: pkg:rpm/redhat/tomcat-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-docs-webapp

Package

Name: tomcat-docs-webapp
Purl: pkg:rpm/redhat/tomcat-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-el-2.2-api

Package

Name: tomcat-el-2.2-api
Purl: pkg:rpm/redhat/tomcat-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-javadoc

Package

Name: tomcat-javadoc
Purl: pkg:rpm/redhat/tomcat-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsp-2.2-api

Package

Name: tomcat-jsp-2.2-api
Purl: pkg:rpm/redhat/tomcat-jsp-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsvc

Package

Name: tomcat-jsvc
Purl: pkg:rpm/redhat/tomcat-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-lib

Package

Name: tomcat-lib
Purl: pkg:rpm/redhat/tomcat-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-servlet-3.0-api

Package

Name: tomcat-servlet-3.0-api
Purl: pkg:rpm/redhat/tomcat-servlet-3.0-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-webapps

Package

Name: tomcat-webapps
Purl: pkg:rpm/redhat/tomcat-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

Red Hat:enterprise_linux:7::server

tomcat

Package

Name: tomcat
Purl: pkg:rpm/redhat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-admin-webapps

Package

Name: tomcat-admin-webapps
Purl: pkg:rpm/redhat/tomcat-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-docs-webapp

Package

Name: tomcat-docs-webapp
Purl: pkg:rpm/redhat/tomcat-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-el-2.2-api

Package

Name: tomcat-el-2.2-api
Purl: pkg:rpm/redhat/tomcat-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-javadoc

Package

Name: tomcat-javadoc
Purl: pkg:rpm/redhat/tomcat-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsp-2.2-api

Package

Name: tomcat-jsp-2.2-api
Purl: pkg:rpm/redhat/tomcat-jsp-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsvc

Package

Name: tomcat-jsvc
Purl: pkg:rpm/redhat/tomcat-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-lib

Package

Name: tomcat-lib
Purl: pkg:rpm/redhat/tomcat-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-servlet-3.0-api

Package

Name: tomcat-servlet-3.0-api
Purl: pkg:rpm/redhat/tomcat-servlet-3.0-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-webapps

Package

Name: tomcat-webapps
Purl: pkg:rpm/redhat/tomcat-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

Red Hat:enterprise_linux:7::workstation

tomcat

Package

Name: tomcat
Purl: pkg:rpm/redhat/tomcat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-admin-webapps

Package

Name: tomcat-admin-webapps
Purl: pkg:rpm/redhat/tomcat-admin-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-docs-webapp

Package

Name: tomcat-docs-webapp
Purl: pkg:rpm/redhat/tomcat-docs-webapp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-el-2.2-api

Package

Name: tomcat-el-2.2-api
Purl: pkg:rpm/redhat/tomcat-el-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-javadoc

Package

Name: tomcat-javadoc
Purl: pkg:rpm/redhat/tomcat-javadoc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsp-2.2-api

Package

Name: tomcat-jsp-2.2-api
Purl: pkg:rpm/redhat/tomcat-jsp-2.2-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-jsvc

Package

Name: tomcat-jsvc
Purl: pkg:rpm/redhat/tomcat-jsvc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-lib

Package

Name: tomcat-lib
Purl: pkg:rpm/redhat/tomcat-lib

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-servlet-3.0-api

Package

Name: tomcat-servlet-3.0-api
Purl: pkg:rpm/redhat/tomcat-servlet-3.0-api

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7

tomcat-webapps

Package

Name: tomcat-webapps
Purl: pkg:rpm/redhat/tomcat-webapps

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:7.0.76-9.el7