{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Fix for CVE-2023-24998 was incomplete", "tracking": { "current_release_date": "2026-08-11T16:53:18+00:00", "generator": { "date": "2026-08-11T16:53:18+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2023-28709", "initial_release_date": "2023-05-22T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T16:53:18+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.9.0", "product": { "name": "Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.9", "product": { "name": "Red Hat Enterprise Linux 9.9", "product_id": "rhel-9", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.3.0", "product": { "name": "Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.9.0", "product": { "name": "Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.3.0", "product": { "name": "Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_version", "name": "pki-servlet-4.0-api", "product": { "name": "pki-servlet-4.0-api", "product_id": "pki-servlet-4.0-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-servlet-4.0-api" } } }, { "category": "product_version", "name": "pki-servlet-container", "product": { "name": "pki-servlet-container", "product_id": "pki-servlet-container", "product_identification_helper": { "purl": "pkg:oci/pki-servlet-container?repository_url=registry.redhat.io/pki-servlet-container" } } }, { "category": "product_version", "name": "pki-servlet-engine", "product": { "name": "pki-servlet-engine", "product_id": "pki-servlet-engine", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-servlet-engine" } } }, { "category": "product_version", "name": "pki-servlet-engine", "product": { "name": "pki-servlet-engine", "product_id": "pki-servlet-engine.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/pki-servlet-engine?arch=src" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-1:9.0.62-27.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@9.0.62-27.el8_9?arch=src&epoch=1" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-1:9.0.62-37.el9_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@9.0.62-37.el9_3?arch=src&epoch=1" } } }, { "category": "product_version", "name": "tomcat-admin-webapps", "product": { "name": "tomcat-admin-webapps", "product_id": "tomcat-admin-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-admin-webapps" } } }, { "category": "product_version", "name": "tomcat-admin-webapps", "product": { "name": "tomcat-admin-webapps", "product_id": "tomcat-admin-webapps-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-admin-webapps", "product": { "name": "tomcat-admin-webapps", "product_id": "tomcat-admin-webapps-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-admin-webapps@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-docs-webapp", "product": { "name": "tomcat-docs-webapp", "product_id": "tomcat-docs-webapp", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-docs-webapp" } } }, { "category": "product_version", "name": "tomcat-docs-webapp", "product": { "name": "tomcat-docs-webapp", "product_id": "tomcat-docs-webapp-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-docs-webapp", "product": { "name": "tomcat-docs-webapp", "product_id": "tomcat-docs-webapp-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-docs-webapp@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-el-2.2-api", "product": { "name": "tomcat-el-2.2-api", "product_id": "tomcat-el-2.2-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-2.2-api" } } }, { "category": "product_version", "name": "tomcat-el-3.0-api", "product": { "name": "tomcat-el-3.0-api", "product_id": "tomcat-el-3.0-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-3.0-api" } } }, { "category": "product_version", "name": "tomcat-el-3.0-api", "product": { "name": "tomcat-el-3.0-api", "product_id": "tomcat-el-3.0-api-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-el-3.0-api", "product": { "name": "tomcat-el-3.0-api", "product_id": "tomcat-el-3.0-api-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-3.0-api@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-javadoc", "product": { "name": "tomcat-javadoc", "product_id": "tomcat-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-javadoc" } } }, { "category": "product_version", "name": "tomcat-jsp-2.2-api", "product": { "name": "tomcat-jsp-2.2-api", "product_id": "tomcat-jsp-2.2-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api" } } }, { "category": "product_version", "name": "tomcat-jsp-2.3-api", "product": { "name": "tomcat-jsp-2.3-api", "product_id": "tomcat-jsp-2.3-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api" } } }, { "category": "product_version", "name": "tomcat-jsp-2.3-api", "product": { "name": "tomcat-jsp-2.3-api", "product_id": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-jsp-2.3-api", "product": { "name": "tomcat-jsp-2.3-api", "product_id": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.3-api@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-jsvc", "product": { "name": "tomcat-jsvc", "product_id": "tomcat-jsvc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsvc" } } }, { "category": "product_version", "name": "tomcat-lib", "product": { "name": "tomcat-lib", "product_id": "tomcat-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-lib" } } }, { "category": "product_version", "name": "tomcat-lib", "product": { "name": "tomcat-lib", "product_id": "tomcat-lib-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-lib@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-lib", "product": { "name": "tomcat-lib", "product_id": "tomcat-lib-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-lib@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-servlet-3.0-api", "product": { "name": "tomcat-servlet-3.0-api", "product_id": "tomcat-servlet-3.0-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api" } } }, { "category": "product_version", "name": "tomcat-servlet-4.0-api", "product": { "name": "tomcat-servlet-4.0-api", "product_id": "tomcat-servlet-4.0-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api" } } }, { "category": "product_version", "name": "tomcat-servlet-4.0-api", "product": { "name": "tomcat-servlet-4.0-api", "product_id": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-servlet-4.0-api", "product": { "name": "tomcat-servlet-4.0-api", "product_id": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-4.0-api@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat-webapps", "product": { "name": "tomcat-webapps", "product_id": "tomcat-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-webapps" } } }, { "category": "product_version", "name": "tomcat-webapps", "product": { "name": "tomcat-webapps", "product_id": "tomcat-webapps-1:9.0.62-27.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.62-27.el8_9?epoch=1" } } }, { "category": "product_version", "name": "tomcat-webapps", "product": { "name": "tomcat-webapps", "product_id": "tomcat-webapps-1:9.0.62-37.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-webapps@9.0.62-37.el9_3?epoch=1" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat?arch=src" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6" } } }, { "category": "product_version", "name": "tomcat6-admin-webapps", "product": { "name": "tomcat6-admin-webapps", "product_id": "tomcat6-admin-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-admin-webapps" } } }, { "category": "product_version", "name": "tomcat6-docs-webapp", "product": { "name": "tomcat6-docs-webapp", "product_id": "tomcat6-docs-webapp", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-docs-webapp" } } }, { "category": "product_version", "name": "tomcat6-el-2.1-api", "product": { "name": "tomcat6-el-2.1-api", "product_id": "tomcat6-el-2.1-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-el-2.1-api" } } }, { "category": "product_version", "name": "tomcat6-javadoc", "product": { "name": "tomcat6-javadoc", "product_id": "tomcat6-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-javadoc" } } }, { "category": "product_version", "name": "tomcat6-jsp-2.1-api", "product": { "name": "tomcat6-jsp-2.1-api", "product_id": "tomcat6-jsp-2.1-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api" } } }, { "category": "product_version", "name": "tomcat6-lib", "product": { "name": "tomcat6-lib", "product_id": "tomcat6-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-lib" } } }, { "category": "product_version", "name": "tomcat6-log4j", "product": { "name": "tomcat6-log4j", "product_id": "tomcat6-log4j", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-log4j" } } }, { "category": "product_version", "name": "tomcat6-servlet-2.5-api", "product": { "name": "tomcat6-servlet-2.5-api", "product_id": "tomcat6-servlet-2.5-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api" } } }, { "category": "product_version", "name": "tomcat6-webapps", "product": { "name": "tomcat6-webapps", "product_id": "tomcat6-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-webapps" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-4.0-api as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:pki-servlet-4.0-api" }, "product_reference": "pki-servlet-4.0-api", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-4.0-api as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:pki-servlet-4.0-api" }, "product_reference": "pki-servlet-4.0-api", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-container as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:pki-servlet-container" }, "product_reference": "pki-servlet-container", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-engine as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:pki-servlet-engine" }, "product_reference": "pki-servlet-engine", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-engine as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:pki-servlet-engine" }, "product_reference": "pki-servlet-engine", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-engine.src as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:pki-servlet-engine.src" }, "product_reference": "pki-servlet-engine.src", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "pki-servlet-engine.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:pki-servlet-engine.src" }, "product_reference": "pki-servlet-engine.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat" }, "product_reference": "tomcat", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat" }, "product_reference": "tomcat", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat" }, "product_reference": "tomcat", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9.src" }, "product_reference": "tomcat-1:9.0.62-27.el8_9.src", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9.src as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src" }, "product_reference": "tomcat-1:9.0.62-27.el8_9.src", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-27.el8_9.src as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src" }, "product_reference": "tomcat-1:9.0.62-27.el8_9.src", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-37.el9_3.src as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src" }, "product_reference": "tomcat-1:9.0.62-37.el9_3.src", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-1:9.0.62-37.el9_3.src as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src" }, "product_reference": "tomcat-1:9.0.62-37.el9_3.src", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-admin-webapps" }, "product_reference": "tomcat-admin-webapps", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-admin-webapps" }, "product_reference": "tomcat-admin-webapps", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-admin-webapps" }, "product_reference": "tomcat-admin-webapps", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-admin-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-admin-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-admin-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-admin-webapps-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-admin-webapps-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-docs-webapp" }, "product_reference": "tomcat-docs-webapp", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-docs-webapp" }, "product_reference": "tomcat-docs-webapp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-docs-webapp" }, "product_reference": "tomcat-docs-webapp", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-docs-webapp-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-docs-webapp-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-docs-webapp-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-docs-webapp-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-docs-webapp-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-2.2-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-el-2.2-api" }, "product_reference": "tomcat-el-2.2-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-el-3.0-api" }, "product_reference": "tomcat-el-3.0-api", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-el-3.0-api" }, "product_reference": "tomcat-el-3.0-api", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-el-3.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-el-3.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-el-3.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-el-3.0-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3.0-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-el-3.0-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-javadoc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-javadoc" }, "product_reference": "tomcat-javadoc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.2-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-jsp-2.2-api" }, "product_reference": "tomcat-jsp-2.2-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-jsp-2.3-api" }, "product_reference": "tomcat-jsp-2.3-api", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-jsp-2.3-api" }, "product_reference": "tomcat-jsp-2.3-api", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsvc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-jsvc" }, "product_reference": "tomcat-jsvc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-lib" }, "product_reference": "tomcat-lib", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-lib" }, "product_reference": "tomcat-lib", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-lib" }, "product_reference": "tomcat-lib", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-lib-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-lib-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-lib-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-lib-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-lib-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-lib-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-3.0-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-servlet-3.0-api" }, "product_reference": "tomcat-servlet-3.0-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-servlet-4.0-api" }, "product_reference": "tomcat-servlet-4.0-api", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-servlet-4.0-api" }, "product_reference": "tomcat-servlet-4.0-api", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat-webapps" }, "product_reference": "tomcat-webapps", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-webapps" }, "product_reference": "tomcat-webapps", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat-webapps" }, "product_reference": "tomcat-webapps", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z::appstream:tomcat-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.10.z::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-1:9.0.62-27.el8_9 as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-br-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9" }, "product_reference": "tomcat-webapps-1:9.0.62-27.el8_9", "relates_to_product_reference": "rhel-br-8.9.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-br-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-webapps-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-br-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-1:9.0.62-37.el9_3 as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" }, "product_reference": "tomcat-webapps-1:9.0.62-37.el9_3", "relates_to_product_reference": "rhel-9.3.0::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat.src" }, "product_reference": "tomcat.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat.src as a component of Red Hat Enterprise Linux 9.9", "product_id": "rhel-9:tomcat.src" }, "product_reference": "tomcat.src", "relates_to_product_reference": "rhel-9" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:tomcat.src" }, "product_reference": "tomcat.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6 as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6" }, "product_reference": "tomcat6", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-admin-webapps" }, "product_reference": "tomcat6-admin-webapps", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-docs-webapp" }, "product_reference": "tomcat6-docs-webapp", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-el-2.1-api" }, "product_reference": "tomcat6-el-2.1-api", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-jsp-2.1-api" }, "product_reference": "tomcat6-jsp-2.1-api", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-lib" }, "product_reference": "tomcat6-lib", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-servlet-2.5-api" }, "product_reference": "tomcat6-servlet-2.5-api", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6-webapps" }, "product_reference": "tomcat6-webapps", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:tomcat6.src" }, "product_reference": "tomcat6.src", "relates_to_product_reference": "rhel-6-els.els" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28709", "cwe": { "id": "CWE-193", "name": "Off-by-one Error" }, "discovery_date": "2023-05-26T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:tomcat6-javadoc", "rhel-7-els.els:tomcat-javadoc", "rhel-8:pki-servlet-container" ] } ], "notes": [ { "category": "other", "text": "The impact for this flaw is considered moderate to match the Apache Software Foundation impact, considering the non-default configuration in CVE description.\n\npki-servlet-engine has been obsoleted in Red Hat Enterprise Linux 8.9 and later by Tomcat, so no additional fixes for the engine would be made available.", "title": "Statement" }, { "category": "description", "text": "A vulnerability has been identified in Apache Tomcat due to an incomplete fix for CVE-2023-24998, which aims to limit the uploaded request parts that can be bypassed in a request. This issue may allow an attacker to use a malicious upload or series of uploads to cause a crash triggering a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.10.z::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-br-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-br-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" ], "known_affected": [ "rhel-6-els.els:tomcat6", "rhel-6-els.els:tomcat6-admin-webapps", "rhel-6-els.els:tomcat6-docs-webapp", "rhel-6-els.els:tomcat6-el-2.1-api", "rhel-6-els.els:tomcat6-jsp-2.1-api", "rhel-6-els.els:tomcat6-lib", "rhel-6-els.els:tomcat6-log4j", "rhel-6-els.els:tomcat6-servlet-2.5-api", "rhel-6-els.els:tomcat6-webapps", "rhel-6-els.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-8:pki-servlet-4.0-api", "rhel-8:pki-servlet-engine", "rhel-8:pki-servlet-engine.src", "rhel-8:tomcat", "rhel-8:tomcat-admin-webapps", "rhel-8:tomcat-docs-webapp", "rhel-8:tomcat-el-3.0-api", "rhel-8:tomcat-jsp-2.3-api", "rhel-8:tomcat-lib", "rhel-8:tomcat-servlet-4.0-api", "rhel-8:tomcat-webapps", "rhel-8:tomcat.src", "rhel-9:pki-servlet-4.0-api", "rhel-9:pki-servlet-engine", "rhel-9:pki-servlet-engine.src", "rhel-9:tomcat", "rhel-9:tomcat-admin-webapps", "rhel-9:tomcat-docs-webapp", "rhel-9:tomcat-el-3.0-api", "rhel-9:tomcat-jsp-2.3-api", "rhel-9:tomcat-lib", "rhel-9:tomcat-servlet-4.0-api", "rhel-9:tomcat-webapps", "rhel-9:tomcat.src" ], "known_not_affected": [ "rhel-6-els.els:tomcat6-javadoc", "rhel-7-els.els:tomcat-javadoc", "rhel-8:pki-servlet-container" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-28709" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28709" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-28709" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-8:pki-servlet-4.0-api", "rhel-8:pki-servlet-engine", "rhel-8:pki-servlet-engine.src", "rhel-9:pki-servlet-4.0-api", "rhel-9:pki-servlet-engine", "rhel-9:pki-servlet-engine.src" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhel-6-els.els:tomcat6", "rhel-6-els.els:tomcat6-admin-webapps", "rhel-6-els.els:tomcat6-docs-webapp", "rhel-6-els.els:tomcat6-el-2.1-api", "rhel-6-els.els:tomcat6-jsp-2.1-api", "rhel-6-els.els:tomcat6-lib", "rhel-6-els.els:tomcat6-log4j", "rhel-6-els.els:tomcat6-servlet-2.5-api", "rhel-6-els.els:tomcat6-webapps", "rhel-6-els.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8:tomcat", "rhel-8:tomcat-admin-webapps", "rhel-8:tomcat-docs-webapp", "rhel-8:tomcat-el-3.0-api", "rhel-8:tomcat-jsp-2.3-api", "rhel-8:tomcat-lib", "rhel-8:tomcat-servlet-4.0-api", "rhel-8:tomcat-webapps", "rhel-8:tomcat.src", "rhel-9:tomcat", "rhel-9:tomcat-admin-webapps", "rhel-9:tomcat-docs-webapp", "rhel-9:tomcat-el-3.0-api", "rhel-9:tomcat-jsp-2.3-api", "rhel-9:tomcat-lib", "rhel-9:tomcat-servlet-4.0-api", "rhel-9:tomcat-webapps", "rhel-9:tomcat.src" ] }, { "category": "vendor_fix", "date": "2023-11-07T08:49:34+00:00", "details": "Apply advisory RHSA-2023:6570 as per vendors instructions.", "product_ids": [ "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-br-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" ], "url": "https://access.redhat.com/errata/RHSA-2023:6570" }, { "category": "vendor_fix", "date": "2023-11-14T15:32:23+00:00", "details": "Apply advisory RHSA-2023:7065 as per vendors instructions.", "product_ids": [ "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.10.z::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-br-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9" ], "url": "https://access.redhat.com/errata/RHSA-2023:7065" }, { "category": "workaround", "details": "No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability.", "product_ids": [ "rhel-6-els.els:tomcat6", "rhel-6-els.els:tomcat6-admin-webapps", "rhel-6-els.els:tomcat6-docs-webapp", "rhel-6-els.els:tomcat6-el-2.1-api", "rhel-6-els.els:tomcat6-jsp-2.1-api", "rhel-6-els.els:tomcat6-lib", "rhel-6-els.els:tomcat6-log4j", "rhel-6-els.els:tomcat6-servlet-2.5-api", "rhel-6-els.els:tomcat6-webapps", "rhel-6-els.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-8:pki-servlet-4.0-api", "rhel-8:pki-servlet-engine", "rhel-8:pki-servlet-engine.src", "rhel-8:tomcat", "rhel-8:tomcat-admin-webapps", "rhel-8:tomcat-docs-webapp", "rhel-8:tomcat-el-3.0-api", "rhel-8:tomcat-jsp-2.3-api", "rhel-8:tomcat-lib", "rhel-8:tomcat-servlet-4.0-api", "rhel-8:tomcat-webapps", "rhel-8:tomcat.src", "rhel-9:pki-servlet-4.0-api", "rhel-9:pki-servlet-engine", "rhel-9:pki-servlet-engine.src", "rhel-9:tomcat", "rhel-9:tomcat-admin-webapps", "rhel-9:tomcat-docs-webapp", "rhel-9:tomcat-el-3.0-api", "rhel-9:tomcat-jsp-2.3-api", "rhel-9:tomcat-lib", "rhel-9:tomcat-servlet-4.0-api", "rhel-9:tomcat-webapps", "rhel-9:tomcat.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "rhel-6-els.els:tomcat6", "rhel-6-els.els:tomcat6-admin-webapps", "rhel-6-els.els:tomcat6-docs-webapp", "rhel-6-els.els:tomcat6-el-2.1-api", "rhel-6-els.els:tomcat6-javadoc", "rhel-6-els.els:tomcat6-jsp-2.1-api", "rhel-6-els.els:tomcat6-lib", "rhel-6-els.els:tomcat6-log4j", "rhel-6-els.els:tomcat6-servlet-2.5-api", "rhel-6-els.els:tomcat6-webapps", "rhel-6-els.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-javadoc", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.10.z::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8:pki-servlet-4.0-api", "rhel-8:pki-servlet-container", "rhel-8:pki-servlet-engine", "rhel-8:pki-servlet-engine.src", "rhel-8:tomcat", "rhel-8:tomcat-admin-webapps", "rhel-8:tomcat-docs-webapp", "rhel-8:tomcat-el-3.0-api", "rhel-8:tomcat-jsp-2.3-api", "rhel-8:tomcat-lib", "rhel-8:tomcat-servlet-4.0-api", "rhel-8:tomcat-webapps", "rhel-8:tomcat.src", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3", "rhel-9:pki-servlet-4.0-api", "rhel-9:pki-servlet-engine", "rhel-9:pki-servlet-engine.src", "rhel-9:tomcat", "rhel-9:tomcat-admin-webapps", "rhel-9:tomcat-docs-webapp", "rhel-9:tomcat-el-3.0-api", "rhel-9:tomcat-jsp-2.3-api", "rhel-9:tomcat-lib", "rhel-9:tomcat-servlet-4.0-api", "rhel-9:tomcat-webapps", "rhel-9:tomcat.src", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-br-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-br-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhel-6-els.els:tomcat6", "rhel-6-els.els:tomcat6-admin-webapps", "rhel-6-els.els:tomcat6-docs-webapp", "rhel-6-els.els:tomcat6-el-2.1-api", "rhel-6-els.els:tomcat6-javadoc", "rhel-6-els.els:tomcat6-jsp-2.1-api", "rhel-6-els.els:tomcat6-lib", "rhel-6-els.els:tomcat6-log4j", "rhel-6-els.els:tomcat6-servlet-2.5-api", "rhel-6-els.els:tomcat6-webapps", "rhel-6-els.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-javadoc", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.10.z::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.10.z::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-8:pki-servlet-4.0-api", "rhel-8:pki-servlet-container", "rhel-8:pki-servlet-engine", "rhel-8:pki-servlet-engine.src", "rhel-8:tomcat", "rhel-8:tomcat-admin-webapps", "rhel-8:tomcat-docs-webapp", "rhel-8:tomcat-el-3.0-api", "rhel-8:tomcat-jsp-2.3-api", "rhel-8:tomcat-lib", "rhel-8:tomcat-servlet-4.0-api", "rhel-8:tomcat-webapps", "rhel-8:tomcat.src", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3", "rhel-9:pki-servlet-4.0-api", "rhel-9:pki-servlet-engine", "rhel-9:pki-servlet-engine.src", "rhel-9:tomcat", "rhel-9:tomcat-admin-webapps", "rhel-9:tomcat-docs-webapp", "rhel-9:tomcat-el-3.0-api", "rhel-9:tomcat-jsp-2.3-api", "rhel-9:tomcat-lib", "rhel-9:tomcat-servlet-4.0-api", "rhel-9:tomcat-webapps", "rhel-9:tomcat.src", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-1:9.0.62-27.el8_9.src", "rhel-br-8.9.0::appstream:tomcat-admin-webapps-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-docs-webapp-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-el-3.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-lib-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-27.el8_9", "rhel-br-8.9.0::appstream:tomcat-webapps-1:9.0.62-27.el8_9", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-1:9.0.62-37.el9_3.src", "rhel-br-9.3.0::appstream:tomcat-admin-webapps-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-docs-webapp-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-el-3.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-jsp-2.3-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-lib-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-servlet-4.0-api-1:9.0.62-37.el9_3", "rhel-br-9.3.0::appstream:tomcat-webapps-1:9.0.62-37.el9_3" ] } ], "title": "Fix for CVE-2023-24998 was incomplete" } ] }