RHSA-2024:8528: Important: pki-servlet-engine security update

Published Oct 28, 2024
·
Updated

Important: pki-servlet-engine security update

Other sources

Tomcat is the servlet engine that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.<br>Security Fix(es):<br><li> tomcat: Denial of Service in Tomcat (CVE-2024-38286)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

11 affected componentsFixes available
redhat/pki-servlet-engine<9.0.43-4.el9_0.1
9.0.43-4.el9_0.1
redhat/pki-servlet<4.0-api-9.0.43-4.el9_0.1
4.0-api-9.0.43-4.el9_0.1
redhat/pki-servlet-engine<9.0.43-4.el9_0.1
9.0.43-4.el9_0.1
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates

Remediation

Event History

Oct 28, 2024
Advisory Published
via Red Hat·12:22 PM
Nov 1, 2024
Advisory Published
via Red Hat·01:42 PM

Frequently Asked Questions

1

What is the severity of RHSA-2024:8528?

The severity of RHSA-2024:8528 is classified as Important.

2

How do I fix RHSA-2024:8528?

To fix RHSA-2024:8528, update the pki-servlet-engine package to version 9.0.43-4.el9_0.1 or higher.

3

Which systems are affected by RHSA-2024:8528?

RHSA-2024:8528 affects Red Hat Enterprise Linux systems that utilize the pki-servlet-engine and pki-servlet packages.

4

What is the purpose of the pki-servlet-engine in RHSA-2024:8528?

The pki-servlet-engine serves as the servlet engine for the Java Servlet and JavaServer Pages technologies.

5

When was RHSA-2024:8528 announced?

RHSA-2024:8528 was announced in relation to a security update for the pki-servlet-engine.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203