[ubuntu/bionic-updates] tomcat8 8.5.39-1ubuntu1~18.04.3 (Accepted)

[Ubuntu Archive Robot]

tomcat8 (8.5.39-1ubuntu1~18.04.3) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS attack on SSI printenv command
    - debian/patches/CVE-2019-0221.patch: escape debug output to aid
      readability
    - CVE-2019-0221   
  * SECURITY UPDATE: DoS via thread exhaustion
    - debian/patches/CVE-2019-10072-1.patch: expand HTTP/2 timeout 
      handling to connection window exhaustion on write.
    - debian/patches/CVE-2019-10072-2.patch: Fix test failures. Handle
      full allocation case.
    - CVE-2019-10072

Date: 2019-09-09 21:57:13.568147+00:00
Changed-By: Maria Emilia Torino <emilia.torino at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/tomcat8/8.5.39-1ubuntu1~18.04.3
-------------- next part --------------
Sorry, changesfile not available.