Linux · Security advisory · October 19, 2023

RHSA-2023:5929: Security update for 8 packages

RHSA-2023:5929, released October 19, 2023, fixes 1 CVE across 8 products. One of them is being exploited (CVE-2023-44487); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2023-44487
Exploitation more likely
0
Vendor assessment
Highest EPSS
1.0000
99th percentile

Fixed package versions

ProductReleaseFixed in
tomcatRHEL 91:9.0.62-11.el9_2.3
tomcat-admin-webappsRHEL 91:9.0.62-11.el9_2.3
tomcat-docs-webappRHEL 91:9.0.62-11.el9_2.3
tomcat-el-3.0-apiRHEL 91:9.0.62-11.el9_2.3
tomcat-jsp-2.3-apiRHEL 91:9.0.62-11.el9_2.3
tomcat-libRHEL 91:9.0.62-11.el9_2.3
tomcat-servlet-4.0-apiRHEL 91:9.0.62-11.el9_2.3
tomcat-webappsRHEL 91:9.0.62-11.el9_2.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2023-44487 MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack 7.5 1.0000 KEVExploited
Showing 1 to 1 of 1 1