UbuntuUpdates.org

Package "libtomcat9-java"

Name: libtomcat9-java

Description:

Apache Tomcat 9 - Servlet and JSP engine -- core libraries
Latest version: 9.0.70-2ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe
Head package: tomcat9
Homepage: http://tomcat.apache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libtomcat9-java"

All arch deb package
APT INSTALL

Other versions of "libtomcat9-java" in Noble

Repository Area Version
base universe 9.0.70-2
updates universe 9.0.70-2ubuntu0.1

Changelog

Version: 9.0.70-2ubuntu0.1 2024-09-25 15:07:08 UTC

  tomcat9 (9.0.70-2ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: HTTP request smuggling via invalid header size
    - debian/patches/CVE-2023-46589_1.patch: Differentiate request cancellation
      from a bad request.
    - debian/patches/CVE-2023-46589_2.patch: Ensure IOException on request read
      always triggers error handling.
    - CVE-2023-46589

 -- Octavio Galland <email address hidden> Mon, 23 Sep 2024 13:59:40 -0300
CVE-2023-46589 Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 thro


About   -   Send Feedback to @ubuntu_updates