UbuntuUpdates.org

Package "libtomcat9-java"

Name: libtomcat9-java

Description:

Apache Tomcat 9 - Servlet and JSP engine -- core libraries

Latest version: 9.0.70-2ubuntu0.1
Release: noble (24.04)
Level: updates
Repository: universe
Head package: tomcat9
Homepage: http://tomcat.apache.org

Links


Download "libtomcat9-java"


Other versions of "libtomcat9-java" in Noble

Repository Area Version
base universe 9.0.70-2
security universe 9.0.70-2ubuntu0.1

Changelog

Version: 9.0.70-2ubuntu0.1 2024-09-25 16:06:56 UTC

  tomcat9 (9.0.70-2ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: HTTP request smuggling via invalid header size
    - debian/patches/CVE-2023-46589_1.patch: Differentiate request cancellation
      from a bad request.
    - debian/patches/CVE-2023-46589_2.patch: Ensure IOException on request read
      always triggers error handling.
    - CVE-2023-46589

 -- Octavio Galland <email address hidden> Mon, 23 Sep 2024 13:59:40 -0300

CVE-2023-46589 Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 thro



About   -   Send Feedback to @ubuntu_updates