File _patchinfo of Package patchinfo.37363
<patchinfo incident="37363"> <issue tracker="cve" id="2024-54677"/> <issue tracker="cve" id="2024-50379"/> <issue tracker="bnc" id="1234663">VUL-0: CVE-2024-50379: tomcat,tomcat10,tomcat6: Apache Tomcat: RCE due to TOCTOU issue in JSP compilation</issue> <issue tracker="bnc" id="1234664">VUL-0: CVE-2024-54677: tomcat,tomcat10,tomcat6: Apache Tomcat: DoS in examples web application</issue> <packager>RMestre</packager> <rating>important</rating> <category>security</category> <summary>Security update for tomcat</summary> <description>This update for tomcat fixes the following issues: - CVE-2024-50379: Fixed remote code execution (RCE) due to TOCTOU issue in JSP compilation (bsc#1234663). - CVE-2024-54677: Fixed denial-of-service (DoS) attack in examples web application (bsc#1234664). </description> </patchinfo>