File _patchinfo of Package patchinfo.28268
<patchinfo incident="28268"> <issue tracker="cve" id="2023-24998"/> <issue tracker="cve" id="2023-28708"/> <issue tracker="bnc" id="1209622">VUL-0: CVE-2023-28708: tomcat: not including the secure attribute causes information disclosure</issue> <issue tracker="bnc" id="1208513">VUL-0: CVE-2023-24998: tomcat,tomcat6,apache-commons-fileupload,jakarta-commons-fileupload: FileUpload DoS with excessive parts</issue> <packager>mbussolotto</packager> <rating>important</rating> <category>security</category> <summary>Security update for tomcat</summary> <description>This update for tomcat fixes the following issues: - CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622). - CVE-2023-24998: Fixed FileUpload deny-of-service with excessive parts (bsc#1208513). </description> </patchinfo>