[CLSA-2023:1698689824] Fix CVE(s): CVE-2023-44487
Type:
security
Severity:
Important
Release date:
2023-10-30 18:17:09 UTC
Description:
* SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: Improvements to HTTP/2 overhead protection - CVE-2023-44487
Updated packages:
  • libtomcat9-embed-java_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:f040a16cceea981f1ca5ed8eb23362cb764bf738
  • libtomcat9-java_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:ed32a89c18e7324e6a82bac58582ab66775d8f33
  • tomcat9_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:5d0cc0b1719b32d8a6a25b0d7a2f058d8bc51382
  • tomcat9-admin_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:809684bb6799a682005e92c7204233a9d740ddbe
  • tomcat9-common_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:d8adbe0d3881dff0bede93be1d163a6e5d13330c
  • tomcat9-docs_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:01fd0b765c8e75ebe093f1e1c9a196d3879ed192
  • tomcat9-examples_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:647401492cc8731a9ae83a35ec971349b46fb01c
  • tomcat9-user_9.0.16-3ubuntu0.18.04.2+tuxcare.els3_all.deb
    sha:8709e7e23381b4bcc9e964dd1a74e28edc0ff87c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.