File _patchinfo of Package patchinfo.37363
<patchinfo incident="37363">
<issue tracker="cve" id="2024-54677"/>
<issue tracker="cve" id="2024-50379"/>
<issue tracker="bnc" id="1234663">VUL-0: CVE-2024-50379: tomcat,tomcat10,tomcat6: Apache Tomcat: RCE due to TOCTOU issue in JSP compilation</issue>
<issue tracker="bnc" id="1234664">VUL-0: CVE-2024-54677: tomcat,tomcat10,tomcat6: Apache Tomcat: DoS in examples web application</issue>
<packager>RMestre</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for tomcat</summary>
<description>This update for tomcat fixes the following issues:
- CVE-2024-50379: Fixed remote code execution (RCE) due to TOCTOU issue in JSP compilation (bsc#1234663).
- CVE-2024-54677: Fixed denial-of-service (DoS) attack in examples web application (bsc#1234664).
</description>
</patchinfo>