RHSA-2020:4004
- Source
- https://access.redhat.com/errata/RHSA-2020:4004
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2020:4004.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2020:4004
- Related
- Published
- 2024-09-16T03:29:49Z
- Modified
- 2024-10-27T18:44:08Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: tomcat security and bug fix update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2020:4004
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
- https://bugzilla.redhat.com/show_bug.cgi?id=1523112
- https://bugzilla.redhat.com/show_bug.cgi?id=1629162
- https://bugzilla.redhat.com/show_bug.cgi?id=1785711
- https://bugzilla.redhat.com/show_bug.cgi?id=1795645
- https://bugzilla.redhat.com/show_bug.cgi?id=1822453
- https://bugzilla.redhat.com/show_bug.cgi?id=1831127
- https://bugzilla.redhat.com/show_bug.cgi?id=1857024
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4004.json
- https://access.redhat.com/security/cve/CVE-2019-17563
- https://www.cve.org/CVERecord?id=CVE-2019-17563
- https://nvd.nist.gov/vuln/detail/CVE-2019-17563
- http://mail-archives.apache.org/mod_mbox/www-announce/201912.mbox/%3C21b7a375-7297-581b-1f8e-06622d36775b@apache.org%3E
- http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.30
- https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.99
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.50
- https://access.redhat.com/security/cve/CVE-2020-13935
- https://www.cve.org/CVERecord?id=CVE-2020-13935
- https://nvd.nist.gov/vuln/detail/CVE-2020-13935
- http://mail-archives.apache.org/mod_mbox/tomcat-announce/202007.mbox/%3C39e4200c-6f4e-b85d-fe4b-a9c2bd5fdc3d%40apache.org%3E
- http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M7
- http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.105
- http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57
- http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37
Affected packages
Red Hat:enterprise_linux:7::client / tomcat
Package
- Name
- tomcat
- Purl
- pkg:rpm/redhat/tomcat
Red Hat:enterprise_linux:7::client / tomcat-admin-webapps
Package
- Name
- tomcat-admin-webapps
- Purl
- pkg:rpm/redhat/tomcat-admin-webapps
Red Hat:enterprise_linux:7::client / tomcat-docs-webapp
Package
- Name
- tomcat-docs-webapp
- Purl
- pkg:rpm/redhat/tomcat-docs-webapp
Red Hat:enterprise_linux:7::client / tomcat-el-2.2-api
Package
- Name
- tomcat-el-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-el-2.2-api
Red Hat:enterprise_linux:7::client / tomcat-javadoc
Package
- Name
- tomcat-javadoc
- Purl
- pkg:rpm/redhat/tomcat-javadoc
Red Hat:enterprise_linux:7::client / tomcat-jsp-2.2-api
Package
- Name
- tomcat-jsp-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-jsp-2.2-api
Red Hat:enterprise_linux:7::client / tomcat-jsvc
Package
- Name
- tomcat-jsvc
- Purl
- pkg:rpm/redhat/tomcat-jsvc
Red Hat:enterprise_linux:7::client / tomcat-lib
Package
- Name
- tomcat-lib
- Purl
- pkg:rpm/redhat/tomcat-lib
Red Hat:enterprise_linux:7::client / tomcat-servlet-3.0-api
Package
- Name
- tomcat-servlet-3.0-api
- Purl
- pkg:rpm/redhat/tomcat-servlet-3.0-api
Red Hat:enterprise_linux:7::client / tomcat-webapps
Package
- Name
- tomcat-webapps
- Purl
- pkg:rpm/redhat/tomcat-webapps
Red Hat:enterprise_linux:7::computenode / tomcat
Package
- Name
- tomcat
- Purl
- pkg:rpm/redhat/tomcat
Red Hat:enterprise_linux:7::computenode / tomcat-admin-webapps
Package
- Name
- tomcat-admin-webapps
- Purl
- pkg:rpm/redhat/tomcat-admin-webapps
Red Hat:enterprise_linux:7::computenode / tomcat-docs-webapp
Package
- Name
- tomcat-docs-webapp
- Purl
- pkg:rpm/redhat/tomcat-docs-webapp
Red Hat:enterprise_linux:7::computenode / tomcat-el-2.2-api
Package
- Name
- tomcat-el-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-el-2.2-api
Red Hat:enterprise_linux:7::computenode / tomcat-javadoc
Package
- Name
- tomcat-javadoc
- Purl
- pkg:rpm/redhat/tomcat-javadoc
Red Hat:enterprise_linux:7::computenode / tomcat-jsp-2.2-api
Package
- Name
- tomcat-jsp-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-jsp-2.2-api
Red Hat:enterprise_linux:7::computenode / tomcat-jsvc
Package
- Name
- tomcat-jsvc
- Purl
- pkg:rpm/redhat/tomcat-jsvc
Red Hat:enterprise_linux:7::computenode / tomcat-lib
Package
- Name
- tomcat-lib
- Purl
- pkg:rpm/redhat/tomcat-lib
Red Hat:enterprise_linux:7::computenode / tomcat-servlet-3.0-api
Package
- Name
- tomcat-servlet-3.0-api
- Purl
- pkg:rpm/redhat/tomcat-servlet-3.0-api
Red Hat:enterprise_linux:7::computenode / tomcat-webapps
Package
- Name
- tomcat-webapps
- Purl
- pkg:rpm/redhat/tomcat-webapps
Red Hat:enterprise_linux:7::server / tomcat
Package
- Name
- tomcat
- Purl
- pkg:rpm/redhat/tomcat
Red Hat:enterprise_linux:7::server / tomcat-admin-webapps
Package
- Name
- tomcat-admin-webapps
- Purl
- pkg:rpm/redhat/tomcat-admin-webapps
Red Hat:enterprise_linux:7::server / tomcat-docs-webapp
Package
- Name
- tomcat-docs-webapp
- Purl
- pkg:rpm/redhat/tomcat-docs-webapp
Red Hat:enterprise_linux:7::server / tomcat-el-2.2-api
Package
- Name
- tomcat-el-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-el-2.2-api
Red Hat:enterprise_linux:7::server / tomcat-javadoc
Package
- Name
- tomcat-javadoc
- Purl
- pkg:rpm/redhat/tomcat-javadoc
Red Hat:enterprise_linux:7::server / tomcat-jsp-2.2-api
Package
- Name
- tomcat-jsp-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-jsp-2.2-api
Red Hat:enterprise_linux:7::server / tomcat-jsvc
Package
- Name
- tomcat-jsvc
- Purl
- pkg:rpm/redhat/tomcat-jsvc
Red Hat:enterprise_linux:7::server / tomcat-lib
Package
- Name
- tomcat-lib
- Purl
- pkg:rpm/redhat/tomcat-lib
Red Hat:enterprise_linux:7::server / tomcat-servlet-3.0-api
Package
- Name
- tomcat-servlet-3.0-api
- Purl
- pkg:rpm/redhat/tomcat-servlet-3.0-api
Red Hat:enterprise_linux:7::server / tomcat-webapps
Package
- Name
- tomcat-webapps
- Purl
- pkg:rpm/redhat/tomcat-webapps
Red Hat:enterprise_linux:7::workstation / tomcat
Package
- Name
- tomcat
- Purl
- pkg:rpm/redhat/tomcat
Red Hat:enterprise_linux:7::workstation / tomcat-admin-webapps
Package
- Name
- tomcat-admin-webapps
- Purl
- pkg:rpm/redhat/tomcat-admin-webapps
Red Hat:enterprise_linux:7::workstation / tomcat-docs-webapp
Package
- Name
- tomcat-docs-webapp
- Purl
- pkg:rpm/redhat/tomcat-docs-webapp
Red Hat:enterprise_linux:7::workstation / tomcat-el-2.2-api
Package
- Name
- tomcat-el-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-el-2.2-api
Red Hat:enterprise_linux:7::workstation / tomcat-javadoc
Package
- Name
- tomcat-javadoc
- Purl
- pkg:rpm/redhat/tomcat-javadoc
Red Hat:enterprise_linux:7::workstation / tomcat-jsp-2.2-api
Package
- Name
- tomcat-jsp-2.2-api
- Purl
- pkg:rpm/redhat/tomcat-jsp-2.2-api
Red Hat:enterprise_linux:7::workstation / tomcat-jsvc
Package
- Name
- tomcat-jsvc
- Purl
- pkg:rpm/redhat/tomcat-jsvc
Red Hat:enterprise_linux:7::workstation / tomcat-lib
Package
- Name
- tomcat-lib
- Purl
- pkg:rpm/redhat/tomcat-lib
Red Hat:enterprise_linux:7::workstation / tomcat-servlet-3.0-api
Package
- Name
- tomcat-servlet-3.0-api
- Purl
- pkg:rpm/redhat/tomcat-servlet-3.0-api