<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Running a fully patched install of Ubuntu 20.04 x64. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Tomcat 9 installed from the normal Ubuntu repos. The version available and installed is 9.0.31.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ran a nessus scan against the box and am being told that verion 9.0.31 is vulnerable to a DoS attack and that I need to upgrade to >=9.0.36. Problem is, that version isn’t available in the Ubuntu repos.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can someone look into getting this package updated in order to resolve this vulnerability?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
<p class="MsoNormal">Brad<o:p></o:p></p>
</div>
<p style="FONT-SIZE: 10pt; FONT-FAMILY: ARIAL"><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri">Thank you,<br>
<br>
<strong>Brad Turnbough</strong></span><br>
<span style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri">Senior Technology Analyst <br>
</span><br>
<img border="0" src="cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif"><br>
<span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri"><span style="FONT-SIZE: 11pt"><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri"><br>
P: 309.272.2739 F: 309.272.2839 <br>
</span><span style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri"><br>
<a style="FONT-SIZE: 11pt" href="http://www.betterbanks.com/">www.betterbanks.com</a><br>
<a style="FONT-SIZE: 11pt" href="http://www.statestreetbank.com">www.statestreetbank.com</a>
</span></span></span></p>
<p style="FONT-SIZE: 10pt; FONT-FAMILY: ARIAL"><span style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; COLOR: #727272">NOTICE: The information contained in this email and any document attached hereto is intended only for the named recipient(s). If you are not the
intended recipient, nor the employee or agent responsible for delivering this message in confidence to the intended recipient(s), you are hereby notified that you have received this transmittal in error, and any review, dissemination, distribution or copying
of this transmittal or its attachments is strictly prohibited. If you have received this transmittal and/or attachments in error, please notify me immediately by reply e-mail and then delete this message, including any attachments.
</span></p>
<p style="FONT-SIZE: 10pt; FONT-FAMILY: ARIAL"> </p>
</body>
</html>