========================================================================== Ubuntu Security Notice USN-3081-2 October 27, 2020
tomcat6 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: The system could be made to run programs as an administrator. Software Description: - tomcat6: Servlet and JSP engine Details: Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could possibly use this issue to obtain root privileges. (CVE-2016-1240) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: libservlet2.5-java 6.0.45+dfsg-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/3081-2 https://usn.ubuntu.com/3081-1 CVE-2016-1240 Package Information: https://launchpad.net/ubuntu/+source/tomcat6/6.0.45+dfsg-1ubuntu0.2
signature.asc
Description: OpenPGP digital signature
-- ubuntu-security-announce mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
