DSA-4281: -1 tomcat8 -- security update
Published Aug 29, 2018
·Updated
Several issues were discovered in the Tomcat servlet and JSP engine. They could lead to unauthorized access to protected resources, denial-of-service, or information leak.
Affected Software
2 affected components
debian/tomcat8
debian/tomcat8
Event History
Aug 29, 2018
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What types of impact are covered by this update?
The issues could allow unauthorized access to protected resources, denial of service, or information disclosure.
2
Which specific vulnerabilities are referenced by the advisory?
The advisory references CVE-2018-1304 and CVE-2018-1305, along with Debian bug 867247.