tocsin

Debian/tomcat9: high 7.5

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream rec

Action: Upgrade tomcat9 to 9.0.40-1 or later.

Affected

introducedfixedlast affected
09.0.40-1-

Fixed versions

9.0.40-1

Sources

published · modified · JSON