File _patchinfo of Package patchinfo.11376

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.11376

<patchinfo incident="11376">
  <issue tracker="cve" id="2019-0199"/>
  <issue tracker="cve" id="2019-0221"/>
  <issue tracker="bnc" id="1111966">hanging SUSE Manager gui due to lack of open files</issue>
  <issue tracker="bnc" id="1131055">VUL-0: CVE-2019-0199: tomcat: Apache Tomcat HTTP/2 DoS</issue>
  <issue tracker="bnc" id="1136085">VUL-0: CVE-2019-0221: tomcat: XSS in SSI printenv</issue>
  <packager>mateialbu</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for tomcat</summary>
  <description>This update for tomcat to version 9.0.20 fixes the following issues:

Security issues fixed:

- CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to 
  streams with excessive numbers of SETTINGS frames (bsc#1131055).
- CVE-2019-0221: Fixed a cross site scripting vulnerability with the SSI printenv command (bsc#1136085).

Non-security issues fixed:

- Increase maximum number of threads and open files for tomcat (bsc#1111966).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.11376

Places