FEDORA-2019-1a3f878d27 — security update for tomcat

stable

tomcat-9.0.21-1.fc30

FEDORA-2019-1a3f878d27 created by csutherl 4 years ago for Fedora 30

This update includes a rebase from 9.0.13 up to 9.0.21 which resolves two CVEs along with various other bugs/features:

#1673856 tomcat-9.0.21 is available
#1713279 CVE-2019-0221 tomcat: XSS in SSI printenv
#1693326 CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-1a3f878d27

This update has been submitted for testing by csutherl.

4 years ago

This update test gating status has been changed to 'waiting'.

4 years ago

This update test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

lnie commented & provided feedback 4 years ago

karma

works as usual

pwalter commented & provided feedback 4 years ago

karma

Works

smithp commented & provided feedback 4 years ago

karma

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

tomcat-9.0.21-1.fc30

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1673856 tomcat-9.0.21 is available

BZ#1693326 CVE-2019-0199 tomcat: Apache Tomcat HTTP/2 DoS [fedora-all]

BZ#1713279 CVE-2019-0221 tomcat: XSS in SSI printenv [fedora-all]

tomcat-9.0.21-1.fc30

Automated Test Results

ignored