File tomcat-8.0.53-CVE-2019-0221.patch of Package tomcat.37363
Index: apache-tomcat-8.0.53-src/java/org/apache/catalina/ssi/SSIPrintenv.java
===================================================================
--- apache-tomcat-8.0.53-src.orig/java/org/apache/catalina/ssi/SSIPrintenv.java
+++ apache-tomcat-8.0.53-src/java/org/apache/catalina/ssi/SSIPrintenv.java
@@ -43,8 +43,7 @@ public class SSIPrintenv implements SSIC
Iterator<String> iter = variableNames.iterator();
while (iter.hasNext()) {
String variableName = iter.next();
- String variableValue = ssiMediator
- .getVariableValue(variableName);
+ String variableValue = ssiMediator.getVariableValue(variableName, "entity");
//This shouldn't happen, since all the variable names must
// have values
if (variableValue == null) {