1. 내용
multipart를 이용하여 버퍼오버플로를 일으킬수 있는 버그외 2가지 버그 수정
2. 업데이트 방법
yum update
3. 관련 패키지
IA-32:
tomcat6-6.0.24-64.el6_5.noarch.rpm
tomcat6-admin-webapps-6.0.24-64.el6_5.noarch.rpm
tomcat6-docs-webapp-6.0.24-64.el6_5.noarch.rpm
tomcat6-el-2.1-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-javadoc-6.0.24-64.el6_5.noarch.rpm
tomcat6-jsp-2.1-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-lib-6.0.24-64.el6_5.noarch.rpm
tomcat6-servlet-2.5-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-webapps-6.0.24-64.el6_5.noarch.rpm
x86_64:
tomcat6-6.0.24-64.el6_5.noarch.rpm
tomcat6-admin-webapps-6.0.24-64.el6_5.noarch.rpm
tomcat6-docs-webapp-6.0.24-64.el6_5.noarch.rpm
tomcat6-el-2.1-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-javadoc-6.0.24-64.el6_5.noarch.rpm
tomcat6-jsp-2.1-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-lib-6.0.24-64.el6_5.noarch.rpm
tomcat6-servlet-2.5-api-6.0.24-64.el6_5.noarch.rpm
tomcat6-webapps-6.0.24-64.el6_5.noarch.rpm
4. 참고 사이트
https://www.sulinux.net/bbs2014/board.php?bo_table=update_2&wr_id=591
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4286
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4322
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0050