File _patchinfo of Package patchinfo.9140

<patchinfo incident="9140">
  <issue tracker="bnc" id="1110850">VUL-0: CVE-2018-11784: tomcat6,tomcat5,tomcat: specially crafted URL could be used to cause a redirect to any URI of the attackers choice</issue>
  <issue tracker="cve" id="2018-11784"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>mateialbu</packager>
  <description>
  
This update for tomcat to 9.0.12 fixes the following issues:

See the full changelog at:
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt)

Security issues fixed:

- CVE-2018-11784: When the default servlet in Apache Tomcat returned
  a redirect to a directory (e.g. redirecting to '/foo/' when the user
  requested '/foo') a specially crafted URL could be used to cause the
  redirect to be generated to any URI of the attackers choice. (bsc#1110850)
</description>
  <summary>Security update for tomcat</summary>
</patchinfo>