Release Info

Advisory: CLSA-2023:1698689824

OS: Ubuntu 18.04 ELS

Public date: 2023-10-30 14:17:07

Project: tomcat9

Version: 9.0.16-3ubuntu0.18.04.2+tuxcare.els3

Errata link: https://errata.cloudlinux.com/ubuntu18-els/CLSA-2023-1698689824.html

Changelog

* SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: Improvements to HTTP/2 overhead protection - CVE-2023-44487

Update

Update command: apt-get update apt-get --only-upgrade install tomcat9*

Packages list

libtomcat9-embed-java_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb libtomcat9-java_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9-admin_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9-common_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9-docs_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9-examples_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb tomcat9-user_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb

CVEs

CVE-2023-44487